[$] SUSE's efforts to disable setuid system-wide

Setuid (and setgid) binaries have long been a source of headaches, and securityvulnerabilities, on Linux systems. They are largely seen as something to beavoided; SUSE's security team, for example, forbidsthe inclusion of setuid or setgid binaries in packages unless they have beenreviewed and explicitly allowed. Thorsten Kukuk wants to go a step further anddisallow them entirely. At the 2026AllSystemsGo! conference, he spokeabout his work to disable setuid system-wide, as well as some of the hurdlesthat remain.