git: make.conf: Delete the mislabeled ENABLE_SUID_SSH knob
Aaron LI
aly at crater.dragonflybsd.org
Tue Oct 6 18:42:42 PDT 2026
commit 3f39eb060950a13222e581443faa1dc04f442d4e
Author: Aaron LI <aly at aaronly.me>
Date: Wed Oct 7 09:21:03 2026 +0800
make.conf: Delete the mislabeled ENABLE_SUID_SSH knob
This knob actually controlled the SUID bit of libexec/ssh-keysign, which
is needed for host-based authentication, and it actually requires the
SUID permission to work.
So just remove the ENABLE_SUID_SSH knob and always install ssh-keysign
with SUID. While there, explicitly set BINOWN=root and change BINMODE
to 4555, following both FreeBSD and OpenBSD.
Obtained-from: FreeBSD (commit 0041e47595fad8de5f6c3fd28522e4aa14eef32a)
Summary of changes:
etc/defaults/make.conf | 3 ---
libexec/ssh-keysign/Makefile | 6 +++---
share/man/man5/make.conf.5 | 7 +------
3 files changed, 4 insertions(+), 12 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/3f39eb060950a13222e581443faa1dc04f442d4e
--
DragonFly BSD source repository
More information about the Commits
mailing list