Allows a process to freely manipulate its own UIDs: - arbitraily set the UID, EUID, REUID and RESUID values - allows the forging of UID credentials passed over a socket