From cdb4ca853afa94e8e70ce13d61d1adbbb0be50b4 Mon Sep 17 00:00:00 2001 From: Mark Murray Date: Mon, 9 Aug 1999 17:12:44 +0000 Subject: SUID ssh breaks kerberos; disable in the kerberized case. I even like the idea of breaking SUID bit permanently, but I'll leave this up to the maintainer. --- security/ssh/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/security/ssh/Makefile b/security/ssh/Makefile index 4e8b8bc82784..27a349d28516 100644 --- a/security/ssh/Makefile +++ b/security/ssh/Makefile @@ -3,7 +3,7 @@ # Date created: 30 Jul 1995 # Whom: torstenb@FreeBSD.ORG # -# $Id: Makefile,v 1.76 1999/07/07 15:36:40 max Exp $ +# $Id: Makefile,v 1.77 1999/07/16 06:09:42 mharo Exp $ # # Maximal ssh package requires YES values for # USE_PERL, USE_TCPWRAP @@ -48,7 +48,8 @@ CONFIGURE_ARGS+= --with-etcdir=${PREFIX}/etc #CONFIGURE_ARGS+= --with-none .if defined(KRB5_HOME) && exists(${KRB5_HOME}) -CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing +CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing \ + --disable-suid-ssh .endif # Include support for the SecureID card -- cgit v1.2.3