I'm a bit confused about the description of
nosuid in the mount manpage on this RedHat system I'm setting up:
nosuid Do not allow set-user-identifier or set-group-identifier bits to take effect. (This seems safe, but is in fact rather unsafe if you have suidperl(1) installed.)
So I looked up suidperl(1) and discovered The suidperl Story, and was properly entertained for five minutes. I also learned that setting
nosuid may not improve security as much as one might like, but I'm back to wondering how
nosuid decreases the overall security, compared to not using it.