> I am of the opinion that setuid/setgid binaries are a UNIX legacy that should be deprecated. Hmmm. I can agree with this pretty quickly at a superficial leve

> I am of the opinion that setuid/setgid binaries are a UNIX legacy that should be deprecated. Hmmm. I can agree with this pretty quickly at a superficial level. suid is extremely overused, however, I'm currently building a purpose-built container/sandbox runtime and I can't see how subordinate IDs (/etc/sub[ug]id) would work. Unless that portion of shadowutils was moved into the kernel? I can't see Linus being on board with that at all. Some sort of ACL for which users a user+process is allowed to become might be useful, but that's what shadowutils is (mostly) doing anyway.