> Don't forget that the debugger can attach to an already running > processes as well. without setuid, it could presumably attach only to > own processes, but if it's running as root... Good catch, you're right (on OS X, haven't tried on Linux yet). R.