ENABLE_SUID_SSH in make.conf

Ruslan Ermilov ru at FreeBSD.org
Tue Oct 17 16:03:40 UTC 2006


On Tue, Oct 17, 2006 at 02:46:39AM -0500, Albert Chin wrote:
> According to make.conf(5):
>      ENABLE_SUID_SSH
>                    (bool) Set this to install ssh(1) with the set-user-ID bit
>                    turned on.
> 
> However, I think ENABLE_SUID_SSH only sets the suid bit for
> /usr/libexec/ssh-keysign.
> 
> Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's
> pointless without it.
> 
Good question.  Let's see what our maintainer has to say about it.
My feeling as well is that the option should just be removed.


Cheers,
-- 
Ruslan Ermilov
ru at FreeBSD.org
FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20061017/f4e73ba2/attachment.pgp


More information about the freebsd-stable mailing list