Date: Sat, 2 Sep 2000 15:18:27 -0700 (PDT) From: Kris Kennaway <kris@FreeBSD.org> To: Brian Somers <brian@Awfulhak.org> Cc: "Jacques A. Vidrine" <n@nectar.com>, Neil Blakey-Milner <nbm@mithrandr.moria.org>, Poul-Henning Kamp <phk@critter.freebsd.dk>, Dan Nelson <dnelson@emsphone.com>, sthaug@nethelp.no, ume@FreeBSD.org, arch@FreeBSD.org, freebsd-arch@FreeBSD.org Subject: Re: setuid ssh should die Message-ID: <Pine.BSF.4.21.0009021512460.83163-100000@freefall.freebsd.org> In-Reply-To: <200009022121.e82LLV771512@hak.lan.Awfulhak.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 2 Sep 2000, Brian Somers wrote:
> What do people reckon then (-arch cc'd) ? I'll add
>
> #ENABLE_SUIDSSH= true
>
> to etc/defaults/make.conf then mention it in ssh_config and make the
> adjustment to the ssh build so that it defaults to *not* being suid.
I have no problems making ssh non-suid by default since most people dont
use RhostsRSAAuthentication.
Since I have ssh changes in the works please send me the patches and I'll
apply them after the upgrade. Please add information to the manpage on how
to fix it, and a helpful error telling them what to do when the user tries
to use it.
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009021512460.83163-100000>