File README of Package disable-setuid
This package has all the config files and dependencies to setup a system in a way, that new privileges are disabled (no_new_privs or NoNewPrivs flags and options). This means, that no setuid or setgid binary will work anymore. A list of setuid binaries, which will no longer work and their replacements: * cron -> systemd.timer * pkexec -> run0 * su -> run0 * sudo -> run0 * pam_unix.so -> pam_unix_ng.so * pam_rootok.so -> no replacement available