diff --git a/pkg/control/server/BUILD b/pkg/control/server/BUILD
index 9f4592f73..4b8de9666 100644
--- a/pkg/control/server/BUILD
+++ b/pkg/control/server/BUILD
@@ -11,7 +11,6 @@ go_library(
     visibility = ["//:sandbox"],
     deps = [
         "//pkg/abi/linux",
-        "//pkg/log",
         "//pkg/sync",
         "//pkg/unet",
         "//pkg/urpc",
diff --git a/pkg/control/server/server.go b/pkg/control/server/server.go
index 906725a09..a6950009b 100644
--- a/pkg/control/server/server.go
+++ b/pkg/control/server/server.go
@@ -28,7 +28,6 @@ import (
 
 	"golang.org/x/sys/unix"
 	"gvisor.dev/gvisor/pkg/abi/linux"
-	"gvisor.dev/gvisor/pkg/log"
 	"gvisor.dev/gvisor/pkg/sync"
 	"gvisor.dev/gvisor/pkg/unet"
 	"gvisor.dev/gvisor/pkg/urpc"
@@ -107,21 +106,6 @@ func (s *Server) serve() {
 			return
 		}
 
-		ucred, err := conn.GetPeerCred()
-		if err != nil {
-			log.Warningf("Control couldn't get credentials: %s", err.Error())
-			conn.Close()
-			continue
-		}
-
-		// Only allow this user and root.
-		if int(ucred.Uid) != curUID && ucred.Uid != 0 {
-			// Authentication failed.
-			log.Warningf("Control auth failure: other UID = %d, current UID = %d", ucred.Uid, curUID)
-			conn.Close()
-			continue
-		}
-
 		// Handle the connection non-blockingly.
 		s.server.StartHandling(conn)
 	}
diff --git a/pkg/unet/unet.go b/pkg/unet/unet.go
index 9510a07ea..2911ffa72 100644
--- a/pkg/unet/unet.go
+++ b/pkg/unet/unet.go
@@ -395,17 +395,6 @@ func (s *Socket) GetPeerName() ([]byte, error) {
 	}
 }
 
-// GetPeerCred returns the peer's unix credentials.
-func (s *Socket) GetPeerCred() (*unix.Ucred, error) {
-	fd, ok := s.enterFD()
-	if !ok {
-		return nil, unix.EBADF
-	}
-	defer s.gate.Leave()
-
-	return unix.GetsockoptUcred(fd, unix.SOL_SOCKET, unix.SO_PEERCRED)
-}
-
 // SocketReader wraps an individual receive operation.
 //
 // This may be used for doing vectorized reads and/or sending additional
diff --git a/pkg/unet/unet_test.go b/pkg/unet/unet_test.go
index 9875a3cda..a39cef99d 100644
--- a/pkg/unet/unet_test.go
+++ b/pkg/unet/unet_test.go
@@ -556,22 +556,6 @@ func TestFDsReceiveSizeZero(t *testing.T) {
 	recvFDs(t, client, 0, []int{})
 }
 
-func TestGetPeerCred(t *testing.T) {
-	server, client := socketPair(t, false)
-	defer server.Close()
-	defer client.Close()
-
-	want := &unix.Ucred{
-		Pid: int32(os.Getpid()),
-		Uid: uint32(os.Getuid()),
-		Gid: uint32(os.Getgid()),
-	}
-
-	if got, err := client.GetPeerCred(); err != nil || !reflect.DeepEqual(got, want) {
-		t.Errorf("GetPeerCred() = %v, %v, want = %+v, %+v", got, err, want, nil)
-	}
-}
-
 func newClosedSocket() (*Socket, error) {
 	fd, err := unix.Socket(unix.AF_UNIX, unix.SOCK_STREAM, 0)
 	if err != nil {
@@ -587,18 +571,6 @@ func newClosedSocket() (*Socket, error) {
 	return s, s.Close()
 }
 
-func TestGetPeerCredFailure(t *testing.T) {
-	s, err := newClosedSocket()
-	if err != nil {
-		t.Fatalf("newClosedSocket got error %v want nil", err)
-	}
-
-	want := "bad file descriptor"
-	if _, err := s.GetPeerCred(); err == nil || err.Error() != want {
-		t.Errorf("s.GetPeerCred() = %v, want = %s", err, want)
-	}
-}
-
 func TestAcceptClosed(t *testing.T) {
 	name, err := randomFilename()
 	if err != nil {