This allows a set-user-ID (other than root) program to drop all of its user privileges, do some un-privileged work, and then re-engage the original effective user ID in a secure manner.

这使set-user-ID（非根）程序能够放弃它的所有用户特权，执行一些非特权操作，然后恢复原来的有效用户 ID。