nostr:npub17yjd7hmtk6fpn5e5npgf3ew0yev6sak9grch02djwe4fss2jxmtqfvq2fd If your brain model is Linux, yeah, it's probably done for.

BSD maybe less so.

And libc is no place to put enforcements in, only thing the libc needs to do is provide userland functions and *maybe* syscall wrappers.

Because otherwise anything that's not using the code in your preferred libc would be left open, setuid isn't even only called by programs written in C.