Um, the safe value is any value as long as it's the same on all systems, including the systems used to develop and test the suid program. Just pick a set of numbers (such as the defaults used by your ...
If Malice's program has managed to get root on Bob's Linux environment, and part of that Linux environment (whether a driver built into the kernel, or a userspace program) is responsible for ...