Since ssh-keysign isn't used by default (you need to set EnableSSHKeysign

to "yes" in /etc/ssh/ssh_config), having a debconf question to ask whether
it should be setuid is overkill, and the question text had got out of date
anyway. Remove this question, ship ssh-keysign setuid in
openssh-client.deb, and set a statoverride if the debconf question was
previously set to false.

1 files changed, 0 insertions, 12 deletions

diff --git a/debian/openssh-client.templates.master b/debian/openssh-client.templates.master
deleted file mode 100644
index 1cb84bf04..000000000
--- a/debian/openssh-client.templates.master
+++ /dev/null
@@ -1,12 +0,0 @@
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-_Description: Do you want ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID bit
- set.
- .
- If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
- host-based authentication.
- .
- If in doubt, I suggest you install it with SUID.  If it causes problems
- you can change your mind later by running:   dpkg-reconfigure ssh