Tech

[$] SUSE's efforts to disable setuid system-wide

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 20/10/2026, 18:50:24 UTC.

Briefings

Thorsten Kukuk proposes a Linux-wide policy to disable setuid binaries entirely, moving beyond SUSE's current package-level restrictions. This initiative aims to eliminate a specific class of system vulnerabilities, though significant implementation hurdles remain. The proposal was presented at the 2026 All Systems Go! conference, where Kukuk outlined both the technical challenges and the remaining obstacles to achieving a complete system-wide ban.

Key points

• Thorsten Kukuk plans to disable setuid binaries system-wide, a move beyond SUSE's existing package-level restrictions.
• The proposal was presented at the 2026 All Systems Go! conference, where Kukuk detailed the technical hurdles.

Context

Thorsten Kukuk's initiative represents a significant security evolution for Linux distributions, aiming to eliminate setuid binaries entirely rather than just restricting them in packages. This approach addresses vulnerabilities that persist even when individual packages are reviewed and approved.

Limitations

The proposal faces substantial implementation hurdles, including system-wide configuration changes and potential compatibility issues with existing software. The evidence is limited to Kukuk's conference presentation, which describes the challenges rather than providing a fully tested or deployed solution.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 20/10/2026, 18:52:09 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeiclkinvdd4i5msyk7j3dlssz2hri7os5zky3dy6xdnzvqepdvqlia