Update Question 10.27:

- Mark up SSH with <application>
- Turn "FreeBSD" into &os;
- Mark up ssh(1)
- Make up make targets with <maketarget>
- Tune mark up of "ENABLE_SUID_SSH= true" (suggested by gabor)

Approved by:  gabor
This commit is contained in:
Gabor Pali 2008-06-21 07:45:20 +00:00
parent a6a3cce6eb
commit 1a022695d4
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=32340

View file

@ -6442,15 +6442,15 @@ options SYSVMSG # enable for messaging</programlisting>
<qandaentry>
<question id="ssh-shosts">
<para>Why does SSH authentication through
<para>Why does <application>SSH</application> authentication through
<filename>.shosts</filename> not work by default in recent
versions of FreeBSD?</para>
versions of &os;?</para>
</question>
<answer>
<para>The reason why <filename>.shosts</filename>
authentication does not work by default in more recent
versions of FreeBSD is because &man.ssh.1;
versions of &os; is because &man.ssh.1;
is not installed suid <username>root</username> by default. To
<quote>fix</quote> this, you can do one of the
following:</para>
@ -6459,8 +6459,8 @@ options SYSVMSG # enable for messaging</programlisting>
<listitem>
<para>As a permanent fix, set
<makevar>ENABLE_SUID_SSH</makevar> to <literal>true</literal>
in <filename>/etc/make.conf</filename> and rebuild ssh
(or run <command>make world</command>).</para>
in <filename>/etc/make.conf</filename> then rebuild and install &man.ssh.1;
(or run <command>make <maketarget>world</maketarget></command>).</para>
</listitem>
<listitem>
@ -6468,9 +6468,9 @@ options SYSVMSG # enable for messaging</programlisting>
<filename>/usr/bin/ssh</filename> to <literal>4555</literal>
by running <command>chmod 4555 /usr/bin/ssh</command> as
<username>root</username>. Then add
<makevar>ENABLE_SUID_SSH= true</makevar> to
<literal><makevar>ENABLE_SUID_SSH</makevar>= true</literal> to
<filename>/etc/make.conf</filename> so the change takes
effect the next time <command>make world</command> is
effect the next time <command>make <maketarget>world</maketarget></command> is
run.</para>
</listitem>
</itemizedlist>