1 files changed, 3 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules
index 83d6b34..716702a 100755
--- a/debian/rules
+++ b/debian/rules
@@ -37,6 +37,9 @@ CONFOPTS += --disable-chfn-chsh
 # => bsdmainutils
 CONFOPTS += --disable-cal
 
+# Reduce setgid programs (cf. CVE-2024-28085)
+CONFOPTS += --disable-use-tty-group
+
 # Get the list of binary package, except lib* and *-udeb, from
 # debian/control instead of hardcoding the list when installing
 # bash-completions below.