Allows a process to freely manipulate its own GIDs: - arbitrarily set the GID, EGID, REGID, RESGID values - arbitrarily set the supplementary GIDs - allows the forging of GID credentials passed over a socket