Cyber ·
SUSE works to disable setuid binaries across the whole Linux system
The SUSE security team is working to disable setuid system-wide on Linux, a measure that still faces obstacles, according to a report on a talk at All Systems Go! 2026.
Setuid and setgid binaries have long been a source of problems and vulnerabilities on Linux systems. The SUSE security team already prohibits including them in packages unless they have been reviewed and explicitly authorized. According to the report from the LWN feed, Thorsten Kukuk, of SUSE, wants to go further and prohibit them entirely. At All Systems Go! 2026, he discussed the work to disable setuid across the whole system and some obstacles that remain.
The item is an automatic translation of an article published in the LWN feed, dated 20 October 2026. The available text does not detail what those obstacles are or the timeline for the change. To verify, consult the original LWN article, whose address is noted in the source, and, if possible, the records of All Systems Go! 2026.
Original source: Os esforços da SUSE para desativar setuid em todo o sistema