From owner-freebsd-arch Sun Sep 3 0:38:22 2000 Delivered-To: freebsd-arch@freebsd.org Received: from smtp02.iafrica.com (smtp02.iafrica.com [196.7.0.140]) by hub.freebsd.org (Postfix) with ESMTP id BEA9637B424 for ; Sun, 3 Sep 2000 00:38:18 -0700 (PDT) Received: from [196.7.18.138] (helo=grimreaper.grondar.za ident=root) by smtp02.iafrica.com with esmtp (Exim 1.92 #1) id 13VUM0-000K96-00; Sun, 3 Sep 2000 09:38:12 +0200 Received: from grimreaper.grondar.za (mark@localhost [127.0.0.1]) by grimreaper.grondar.za (8.11.0/8.11.0) with ESMTP id e837d1x16901; Sun, 3 Sep 2000 09:39:03 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200009030739.e837d1x16901@grimreaper.grondar.za> To: Brian Somers Cc: freebsd-arch@FreeBSD.ORG Subject: Re: setuid ssh should die References: <200009022121.e82LLV771512@hak.lan.Awfulhak.org> In-Reply-To: <200009022121.e82LLV771512@hak.lan.Awfulhak.org> ; from Brian Somers "Sat, 02 Sep 2000 22:21:31 +0100." Date: Sun, 03 Sep 2000 09:39:01 +0200 From: Mark Murray Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > What do people reckon then (-arch cc'd) ? I'll add > > #ENABLE_SUIDSSH= true > > to etc/defaults/make.conf then mention it in ssh_config and make the > adjustment to the ssh build so that it defaults to *not* being suid. Sounds perfectly sensible to me. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message