Run0, a systemd based alternative to sudo, announced

This will be great. We can finally deprecate sudo on systemd systems. Then we should be able to deprecate PAM, setuid bit, etc.

I can see creating a system with zero setuid files, but I don't think this reduces PAM use, does it?

Not setuid generically, but `sudo` itself has a bunch of pam support/dependency.

I wonder, are there any distros already with a nosuid root?

I would expect sudo to also touch pam a lot, but AIUI systemd also uses pam through polkit for its ~native permission system - https://serverfault.com/questions/841306/authentication-is-r...

Is removing setuid actually a win? I know it presents a security risk, but it feels like we're not actually removing that attack surface, just moving it around.

Well... that "attack surface" isn't new, its mostly just repackaging systemd-run, which is just used to tell PID1 to launch a new process. So in total the attack surface would be reduced by removing sudo.