After an exhaustive search for things affected by the [gs]etgroups(2)
change, I think I've nailed all of them (save one, which J.T. said he
would fix B-)).  After tonight's update on sun-lamp, the world should
be safe again.

Note that once you install a new kernel, you'll also need to recompile
at least:

bin/ps
lib/libkvm
sbin/mountd
usr.bin/fstat
usr.bin/netstat
usr.bin/w

In particular, until you install a new mountd(8), NFS exports will not
work!

As always, if you experience any difficulties, let us know.