From owner-freebsd-stable@FreeBSD.ORG  Tue Oct 17 16:03:40 2006
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
X-Original-To: freebsd-stable@FreeBSD.org
Delivered-To: freebsd-stable@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ADCD916A403;
	Tue, 17 Oct 2006 16:03:40 +0000 (UTC)
	(envelope-from ru@rambler-co.ru)
Received: from relay0.rambler.ru (relay0.rambler.ru [81.19.66.187])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6E23143D53;
	Tue, 17 Oct 2006 16:03:38 +0000 (GMT)
	(envelope-from ru@rambler-co.ru)
Received: from relay0.rambler.ru (localhost [127.0.0.1])
	by relay0.rambler.ru (Postfix) with ESMTP id 8331D5EFF;
	Tue, 17 Oct 2006 20:03:37 +0400 (MSD)
Received: from edoofus.park.rambler.ru (unknown [81.19.65.108])
	by relay0.rambler.ru (Postfix) with ESMTP id 7961C5EFD;
	Tue, 17 Oct 2006 20:03:37 +0400 (MSD)
Received: (from ru@localhost)
	by edoofus.park.rambler.ru (8.13.8/8.13.8) id k9HG3qWD072379;
	Tue, 17 Oct 2006 20:03:52 +0400 (MSD) (envelope-from ru)
Date: Tue, 17 Oct 2006 20:03:52 +0400
From: Ruslan Ermilov <ru@FreeBSD.org>
To: Dag-Erling Smorgrav <des@FreeBSD.org>
Message-ID: <20061017160351.GA72123@rambler-co.ru>
References: <20061017074639.GB11838@mail1.thewrittenword.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="gKMricLos+KVdGMg"
Content-Disposition: inline
In-Reply-To: <20061017074639.GB11838@mail1.thewrittenword.com>
User-Agent: Mutt/1.5.13 (2006-08-11)
X-Virus-Scanned: No virus found
Cc: freebsd-stable@FreeBSD.org
Subject: Re: ENABLE_SUID_SSH in make.conf
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Oct 2006 16:03:40 -0000


--gKMricLos+KVdGMg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Oct 17, 2006 at 02:46:39AM -0500, Albert Chin wrote:
> According to make.conf(5):
>      ENABLE_SUID_SSH
>                    (bool) Set this to install ssh(1) with the set-user-ID=
 bit
>                    turned on.
>=20
> However, I think ENABLE_SUID_SSH only sets the suid bit for
> /usr/libexec/ssh-keysign.
>=20
> Why isn't /usr/libexec/ssh-keysign suid by default anyway? It's
> pointless without it.
>=20
Good question.  Let's see what our maintainer has to say about it.
My feeling as well is that the option should just be removed.


Cheers,
--=20
Ruslan Ermilov
ru@FreeBSD.org
FreeBSD committer

--gKMricLos+KVdGMg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)

iD8DBQFFNP7nqRfpzJluFF4RAj9OAKCRhdPdpt1ItDRiLGbHT+g7DRUS6QCgjsbI
YTZV6+vzDdcqTmd9R+x4Fa0=
=laAb
-----END PGP SIGNATURE-----

--gKMricLos+KVdGMg--