2026-10-01 –, Loft
This talk will give an update on make NoNewPrivs the default on a Linux distribution.
Running systems with “NoNewPrivs” by default is already possible without issues for many use cases, but there are still some cases where it doesn't work. As followup to last year's presentation “Accessing shadow records via varlink” this session provides an up-to-date status report on the progress made and the issues that remain.
Thorsten Kukuk is a Distinguished Engineer at SUSE leading the Future
Technology Team. With nearly 30 years in open source, he pioneered NIS (YP)
for Linux, contributed to glibc, and serves as a long-time Linux-PAM
maintainer.
Today he is the key architect behind openSUSE MicroOS and transactional updates.