Since Debian Buster, `sh` drops SUID privileges unless the `-p` option is passed, thus behaving like Ubuntu.