SUSE works to disable setuid system-wide on Linux

Thorsten Kukuk of SUSE described his work to disable setuid and setgid system-wide at the 2026 All Systems Go! conference. SUSE already forbids such binaries in packages without explicit approval, but hurdles remain for a full phase-out.

• SUSE forbids setuid/setgid binaries in packages without explicit approval
• Kukuk proposed removing setuid entirely across the system
• Some hurdles remain before a full disablement