Fedora to (try to) remove setuid files for F15

[Distributions] Posted Oct 28, 2010 14:54 UTC (Thu) by corbet

The report from the October 26 FESCO meeting (click below for the whole thing) includes the news that the remove setuid feature has been approved for the Fedora 15 release. "File Capabilties have been present in the Operating System for a few releases now, it is time that we remove setuid applications and just assign the capabilities required by an application. This should make the applications and the Operating System more secure." Implementing this should be an interesting challenge.

Full Story (comments: 17)