The tinc daemon is now setgid The daemon can drop privileges with: sysrc tincd_flags=--user=tinc Reported by: Poul-Henning Kamp