freebsd stable - Oct 2006 - ENABLE_SUID_SSH in make.conf

According to make.conf(5):
     ENABLE_SUID_SSH
                   (bool) Set this to install ssh(1) with the set-user-ID bit
                   turned on.

However, I think ENABLE_SUID_SSH only sets the suid bit for
/usr/libexec/ssh-keysign.

Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's
pointless without it.

-- 
albert chin (china@thewrittenword.com)

On Tue, Oct 17, 2006 at 02:46:39AM -0500, Albert Chin
wrote:
> According to make.conf(5):
>      ENABLE_SUID_SSH
>                    (bool) Set this to install ssh(1) with the set-user-ID
bit
>                    turned on.
> 
> However, I think ENABLE_SUID_SSH only sets the suid bit for
> /usr/libexec/ssh-keysign.
> 
> Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's
> pointless without it.
> 
Good question.  Let's see what our maintainer has to say about it.
My feeling as well is that the option should just be removed.


Cheers,
-- 
Ruslan Ermilov
ru@FreeBSD.org
FreeBSD committer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :
http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20061017/f4e73ba2/attachment.pgp