all the set/get real/effective/saved/file-system uid/gid system call management is still missing.
A data structure to store the current values for each process is needed.
We also need a suitable abstraction to decide when the new {u|g}id is virtual or real (it is just seen by processes or it is known by the real Linux kernel)