--- projects/libstatgrab/docs/libstatgrab/statgrab.xml	2003/10/21 15:48:55	1.2
+++ projects/libstatgrab/docs/libstatgrab/statgrab.xml	2004/01/05 17:20:29	1.3
@@ -6,8 +6,8 @@
 <refentry id="statgrab">
 
   <refentryinfo>
-    <date>$Date: 2003/10/21 15:48:55 $</date>
-    <releaseinfo>$Id: statgrab.xml,v 1.2 2003/10/21 15:48:55 pajs Exp $</releaseinfo>
+    <date>$Date: 2004/01/05 17:20:29 $</date>
+    <releaseinfo>$Id: statgrab.xml,v 1.3 2004/01/05 17:20:29 ats Exp $</releaseinfo>
   </refentryinfo>
   
   <refmeta>
@@ -29,6 +29,10 @@
         <funcdef>int <function>statgrab_init</function></funcdef>
         <void/>
       </funcprototype>
+      <funcprototype>
+        <funcdef>int <function>statgrab_drop_privileges</function></funcdef>
+        <void/>
+      </funcprototype>
 
       <funcprototype>
         <funcdef>cpu_percent_t *<function>cpu_percent_usage</function></funcdef>
@@ -117,10 +121,15 @@
       leaves them open for future use. Because of this, any special
       privileges the program has (e.g. setgid kmem) can be dropped
       after this call, and all the libstatgrab calls should continue to
-      work.
+      work. It is therefore a good idea to call
+      <function>statgrab_drop_privileges</function>, which discards
+      setuid and setgid privileges, immediately after you call
+      <function>statgrab_init</function>, unless your application has
+      another reason for needing setuid or setgid privileges.
     </para>
     <para>
-      <function>statgrab_init</function> returns 0 on success, and
+      <function>statgrab_init</function> and
+      <function>statgrab_drop_privileges</function> return 0 on success, and
       non-zero on failure.
     </para>
     <para>