What if we had per-process securelevel flag, inherited at fork etc., which would make (f)suser return 0 everytime for these processes?
What's the state of linux-privs?
-Topi