suid bit sshd

Maxim Konovalov maxim at macomnet.ru
Fri Aug 20 04:05:09 PDT 2004


On Fri, 20 Aug 2004, 12:20+0200, Dag-Erling Sm?rgrav wrote:

> Maxim Konovalov <maxim at macomnet.ru> writes:
> > DES, is it OK to commit a following patch?  Or you were going to
> > deprecate ENABLE_SUID_SSH?  We still have it in make.conf(5),
> > share/examples/etc/make.conf and ssh-keysign/Makefile.
>
> The whole point with ssh-keysign is to separate out the parts of ssh
> that need a setuid bit.  It should not be necessary for ssh to have a
> setuid bit if ssh-keysign does, which is what ENABLE_SUID_SSH controls
> these days.

Ah, OK, thanks for the clarification.

-- 
Maxim Konovalov


More information about the freebsd-current mailing list