According to make.conf(5): ENABLE_SUID_SSH (bool) Set this to install ssh(1) with the set-user-ID bit turned on. However, I think ENABLE_SUID_SSH only sets the suid bit for /usr/libexec/ssh-keysign. Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's pointless without it. -- albert chin (china at thewrittenword.com)