1 files changed, 3 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules
index a03d8cc..4c716cd 100755
--- a/debian/rules
+++ b/debian/rules
@@ -45,6 +45,9 @@ CONFOPTS += --disable-cal
 # Keep hwclock as GPLv2 (and others)
 CONFOPTS += --disable-hwclock-gplv3
 
+# Reduce setgid programs (cf. CVE-2024-28085)
+CONFOPTS += --disable-use-tty-group
+
 # Get the list of binary package, except lib* and *-udeb, from
 # debian/control instead of hardcoding the list when installing
 # bash-completions below.