Hi,

> I'm not conviced that's even the obvious solution.  open_as() is more
> obvious, and a set of filesystem-ID credentials is perhaps the more
> generic solution to cover all filesystem accesses, though it's
> potentially just as dangerous as ID swapping (I haven't yet explored the
> full range of possibilities with it yet).

Maybe I'm an idiot, but can anyone please try to explain to me what
an open_as system call would buy us above the sequence of set*id/open?
There must be something I don't get...

Ciao,
Wolfgang
-- 
ws@TooLs.DE     Wolfgang Solfrank, TooLs GmbH 	+49-228-985800