need not be malicious; the
                    wrong environment could be used by the application
                    simply by inadvertently specifying the wrong path to 
                    <code class="literal">DB_HOME</code>.
                </p>
                <p>
                    As always, you should use <code class="literal">setuid</code>
                    sparingly, if at all. But if you do use
                    <code class="literal">setuid</code>, then you should refrain from
             