[$] SUSE's efforts to disable setuid system-wide
Date:
Tue, 20 Oct 2026 18:36:10 +0000
Description:
Setuid (and setgid) binaries have long been a source of headaches, and security
vulnerabilities, on Linux systems. They are largely seen as something to be avoided; SUSE's security team, for example, forbids
the inclusion of setuid or setgid binaries in packages unless they have been reviewed and explicitly allowed. Thorsten Kukuk wants to go a step further and disallow them entirely. At the 2026AllSystemsGo! conference, he spoke
about his work to disable setuid system-wide, as well as some of the hurdles that remain.
======================================================================
Link to news story:
https://lwn.net/Articles/1100257/
--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)