From dd707cf4f4cf45baef6b39d771ff24434e498e87 Mon Sep 17 00:00:00 2001
From: green <green@FreeBSD.org>
Date: Tue, 14 Nov 2000 04:42:25 +0000
Subject: Disable /usr/bin/ssh being setuid root by default.  Let the variable
 ENABLE_SUID_SSH being defined reenable it for those that want it.

This follows discussion favoring the change from September.  It
is not usually necessary to be setuid root, possibly less safe,
and less convenient (cannot use $HOSTALIASES, for example).

Submitted by:	jedgar
---
 secure/usr.bin/ssh/Makefile | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'secure')

diff --git a/secure/usr.bin/ssh/Makefile b/secure/usr.bin/ssh/Makefile
index 10dcbf0..0b99611 100644
--- a/secure/usr.bin/ssh/Makefile
+++ b/secure/usr.bin/ssh/Makefile
@@ -5,7 +5,9 @@ SSHSRC=	${.CURDIR}/../../../crypto/openssh
 
 PROG=	ssh
 BINOWN=	root
+.if defined(ENABLE_SUID_SSH)
 BINMODE=4555
+.endif
 MAN1=	ssh.1
 LINKS=	${BINDIR}/ssh ${BINDIR}/slogin
 MLINKS=	ssh.1 slogin.1
-- 
cgit v1.1