> > Are you sure ssh requires a host key? I could have sworn this was
> > entirely related to sshd and could thus be lumped into the same
> > "if sshd_enable=YES" clause.
>
> The code does not lie :-)
>
> >From ssh.c:
>
> /*
> * If we successfully made the connection, load the host private key
> * in case we will need it later for combined rsa-rhosts
> * authentication. This must be done before releasing extra
> * privileges, because the file is only readable by root.
But this means that ssh must be setuid root. Some of us insist on *not*
using rsa-rhosts authentication, and install ssh without any privileges.
Looks to me like we need a couple of alternatives here.
Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
