File README of Package disable-setuid

This package has all the config files and dependencies
to setup a system in a way, that new privileges are disabled
(no_new_privs or NoNewPrivs flags and options).

This means, that no setuid or setgid binary will work anymore.

A list of setuid binaries, which will no longer work and their
replacements:

* cron -> systemd.timer
* pkexec -> run0
* su -> run0
* sudo -> run0
* pam_unix.so -> pam_unix_ng.so
* pam_rootok.so -> no replacement available
openSUSE Build Service is sponsored by