Packages with the suid use flag

Global definition: Enable setuid root program, with potential security risks.

app-cdr / xcdroast : Lightweight cdrtools front-end for CD and DVD writing

app-emulation / hercules : Hercules System/370, ESA/390 and zArchitecture Mainframe Emulator

app-misc / beep : The advanced PC speaker beeper

dev-libs / libspt : Library for handling root privilege

dev-libs / weston : Wayland reference compositor

media-radio / tucnak : Amateur Radio VHF Contest Logbook

media-radio / unixcw : A package of programs that fit together to form a morse code tutor program

net-analyzer / driftnet : Listen to network traffic and pick out images from TCP streams observed

net-analyzer / fping : A utility to ping multiple hosts at once

net-analyzer / tcpdump : A Tool for network monitoring and data acquisition

net-mail / dovecot : An IMAP and POP3 server written with security primarily in mind

net-wireless / kismet : IEEE 802.11 wireless LAN sniffer

  • Install a setuid root helper binary with limited functionality; this allows running kismet as a normal user, significantly reducing security risks

sys-apps / bubblewrap : Unprivileged sandboxing tool, namespaces-powered chroot-like solution

sys-apps / firejail : Security sandbox for any type of processes

sys-apps / util-linux : Various useful Linux utilities

  • install mount/umount as setuid so non-root users may mount/umount devices, and wall/write as setgid so non-root users can notify other users

sys-block / scsiadd : Add and remove SCSI devices from your Linux system during runtime

sys-cluster / singularity : Application containers for Linux

sys-fs / ecryptfs-utils : eCryptfs userspace utilities

sys-fs / mhddfs : Fuse multi harddrive filesystem

sys-fs / ntfs3g : Open source read-write NTFS driver that runs under FUSE

sys-libs / glibc : GNU libc C library

  • Make internal pt_chown helper setuid -- not needed if using Linux and have /dev/pts mounted with gid=5

www-apps / webdavcgi : A Perl CGI for accessing and sharing files, or calendar/addressbooks via WebDAV.

www-client / chromium : Open-source version of Google Chrome web browser

  • Build the SUID sandbox, which is only needed on CONFIG_USER_NS=n kernels

www-client / links : A fast and lightweight web browser running in both graphics and text mode

x11-base / xorg-server : X.Org X servers

x11-misc / xosview : X11 operating system viewer

x11-misc / xscreensaver : A modular screen saver and locker for the X Window System

x11-plugins / wmping : a simple host status monitoring dockapp