In tame mode, return EPERM for *chown if uid/gid change is not towards cr_uid/cr_gid (effective ids).  Thus, chown(, -1,-1) should work OK, so should chown(, me, -1), etc.  With this commited, more people can test.
In tame mode, return EPERM for *chown if uid/gid change is not towards
cr_uid/cr_gid (effective ids).  Thus, chown(, -1,-1) should work OK, so
should chown(, me, -1), etc.  With this commited, more people can test.

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars