Enabling no_new_privs/NoNewPrivs, disabling setuid on Linux | Dark Hacker News