FWIW, it looks like privasserted() in zsh might be (and this is without reading the source) some attempt to reproduce the issetugid() functionality. It should just invoke that call rather than rolling its own, if so -- the TrustedBSD cap implementation update the issetugid() flag to reflect capability privileges.
Robert N M Watson FreeBSD Core Team, TrustedBSD Projects [EMAIL PROTECTED] Network Associates Laboratories To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message