Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges
> Added bprm->nosuid to make remove the need to add > duplicate error prone checks. This ensures that > the disabling of suid executables is exactly the > same as MNT_NOSUID.
Another fine example of why we have security hooks so that we don't get a kernel full of other "random security idea of the day" hacks.