Allows a process to freely manipulate its own UIDs: - arbitrarily set the UID, EUID, REUID and RESUID values - allows the forging of UID credentials passed over a socket