Post Syndicated from jzb original https://lwn.net/Articles/1100257/

Setuid (and setgid) binaries have long been a source of headaches, and security
vulnerabilities, on Linux systems. They are largely seen as something to be
avoided; SUSE’s security team, for example, forbids
the inclusion of setuid or setgid binaries in packages unless they have been
reviewed and explicitly allowed. Thorsten Kukuk wants to go a step further and
disallow them entirely. At the 2026 All Systems Go! conference, he spoke
about his work to disable setuid system-wide, as well as some of the hurdles
that remain.