Fedora to (try to) remove setuid files for F15

Posted Oct 31, 2010 12:18 UTC (Sun) by kevinm (guest, #69913)
Parent article: Fedora to (try to) remove setuid files for F15

As pointed out in the conversation, there are several capabilities that equivalent to being setuid root anyway:

19:20:17 <ajax> xserver might be a special case, but really anything that needs dac_override or sys_admin is trivially equivalent to root