Eliminating setuid binaries system-wide; is it possible? This #oSC26 talk explores how the #Linux kernel's no_new_privs flag and #systemd's NoNewPrivs in PID1 can shut down an entire class of privilege escalation attacks on #openSUSE. youtu.be/nTXsj1u5dA4?...
