According to make.conf(5):
ENABLE_SUID_SSH
(bool) Set this to install ssh(1) with the set-user-ID bit
turned on.
However, I think ENABLE_SUID_SSH only sets the suid bit for
/usr/libexec/ssh-keysign.
Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's
pointless without it.
--
albert chin (china at thewrittenword.com)