From owner-freebsd-questions@FreeBSD.ORG Sun Jan 22 00:55:00 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5A85016A420 for ; Sun, 22 Jan 2006 00:55:00 +0000 (GMT) (envelope-from adam.stroud@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.203]) by mx1.FreeBSD.org (Postfix) with ESMTP id DBD6C43D46 for ; Sun, 22 Jan 2006 00:54:59 +0000 (GMT) (envelope-from adam.stroud@gmail.com) Received: by zproxy.gmail.com with SMTP id 9so712367nzo for ; Sat, 21 Jan 2006 16:54:59 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=P1soc+ftToh3qo2WxzOei9CU7eIDJ+XYhpTHOAh4akC/Wvlv0UpvjDjiyYkSuX1Qk+qnRvrSC1kBDM8wOJwCcTSNAoRF9Enxc8K9/G0cUi8cGYe0/YKpmoI9Vr3net1qYqVu6o1NNRp3FksL67qQ9WfHheIpY/AngSIJheIzUzM= Received: by 10.36.38.20 with SMTP id l20mr355550nzl; Sat, 21 Jan 2006 16:54:58 -0800 (PST) Received: by 10.36.43.6 with HTTP; Sat, 21 Jan 2006 16:54:58 -0800 (PST) Message-ID: Date: Sat, 21 Jan 2006 19:54:58 -0500 From: Adam Stroud To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: make.conf Question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Jan 2006 00:55:00 -0000 All: I have been playing around with make.conf and I see that it is possible to to use the "NO_OPENSSH" variable to not build openssh when updating fbsd from source. I also noticed in the /etc/defaults/rc.conf file that there i= s a "sshd_program" entry that can be used to adjust where the installation of sshd is. I am assuming that this means that I can install openssh from the ports exclusively and use the rc.conf file to launch the ports sshd on startup. Here are my questions about this: 1. Is my assumption correct? 2. Does this also apply to things like kerberos and openssl 3. Does this impose any notable side effects to the system (possibly with stability/security)? Thanks A