Why do we use getgrouplist(3) at all? What we're interested in are the permissions of the current process, not what's in the system-wide database. Roland