New comment by 0x5c on void-packages repository https://github.com/void-linux/void-packages/pull/33011#issuecomment-1087087080 Comment: Going through the list, there's some odd ones I'm not sure what to do with - [ ] `Powermanga`, uses sgid `root:games`, except that we don't have a `games` group, it is not being created, and the package has no INSTALL script to chown it. See [Arch Wiki](https://wiki.archlinux.org/title/Users_and_groups#User_groups) and [Debian Wiki](https://wiki.debian.org/SystemGroups#Groups_with_an_associated_user). - [ ] `containers`, has suid binaries `/usr/bin/{contain,pseudo}` as `root:root`, but the [README](https://github.com/arachsys/containers) mentions situations where suid should not be installed. There's also some packages I barely comprehend in the first place and will not attempt to allow/fix - [ ] `arcan`, a "Combined display server, multimedia framework and game engine". (Wouldn't a game engine preferably not run as root?) - [ ] all instances of `chrome-sandbox`, since I do not know how those work - [ ] all `mount.*` tools, hard to test and no idea how they work in relation to `mount` itself being suid Packages I can tell need setuid/setgid are being marked as allowed and pushed to [`0x5c:suid`](https://github.com/0x5c/void-packages/tree/suid) as I go through the list. I'll be making PRs to void-packages directly for packages that appear to not need suid/sgid, as was the case for vpsm: https://github.com/void-linux/void-packages/pull/36489. I'll list those here if there's more.