First of all, I said it could be setuid or setgid, and, as @Gilles points out, setgid is better.???Secondly, are setgid programs off the table, or only setgid scripts????Because I wasn't suggesting a script; I was suggesting a program, in a language such as C, that can be compiled to a binary executable.