git: make.conf: Delete the mislabeled ENABLE_SUID_SSH knob

Aaron LI aly at crater.dragonflybsd.org
Tue Oct 6 18:42:42 PDT 2026


commit 3f39eb060950a13222e581443faa1dc04f442d4e
Author: Aaron LI <aly at aaronly.me>
Date:   Wed Oct 7 09:21:03 2026 +0800

    make.conf: Delete the mislabeled ENABLE_SUID_SSH knob
    
    This knob actually controlled the SUID bit of libexec/ssh-keysign, which
    is needed for host-based authentication, and it actually requires the
    SUID permission to work.
    
    So just remove the ENABLE_SUID_SSH knob and always install ssh-keysign
    with SUID.  While there, explicitly set BINOWN=root and change BINMODE
    to 4555, following both FreeBSD and OpenBSD.
    
    Obtained-from: FreeBSD (commit 0041e47595fad8de5f6c3fd28522e4aa14eef32a)

Summary of changes:
 etc/defaults/make.conf       | 3 ---
 libexec/ssh-keysign/Makefile | 6 +++---
 share/man/man5/make.conf.5   | 7 +------
 3 files changed, 4 insertions(+), 12 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/3f39eb060950a13222e581443faa1dc04f442d4e


-- 
DragonFly BSD source repository


More information about the Commits mailing list