> So how is dropping privileges done correctly to avoid getting killed by the user? For this case of temporarily lowering access rights to avoid user loading u

> So how is dropping privileges done correctly to avoid getting killed by the user? For this case of temporarily lowering access rights to avoid user loading unauthorized files, by only setting effective user id (EUID) (or filesystem user id (FSUID), though its use should be avoided nowadays) instead of real user id (RUID) like the code did. And same for group id.