Has ANYONE in this thread considered that we already have a possibly more
   secure mechanism for this, that could be combined simultaneously with
   authentication for use by a non-suid program?
   
   See unix(4) and its description of passing fd's via a "cmsghdr".


how does this fix ping & traceroute as they currently stand?