d9443187_and_ClamAV___InfoSec_Institute__Name
[Description] When some executables have the SUID/SGID bit set, it means that those files will execute with root privileges no matter which user executed them. This is why we must limit the number of those executables, so we reduce the vector of attack to attacker. Remember that you shouldn’t remove the SUID bit on su executable, otherwise you won’t be able to su to root anymore. [Name] 
SUID/SGID files
Gentoo Hardening: Part 4: PaX, RBAC and ClamAV - InfoSec Institute
Name