From: Peter Müller <peter.mueller@ipfire.org>
Date: Sun, 16 May 2021 20:48:58 +0000 (+0200)
Subject: OpenSSH: do not ship ssh-keysign anymore
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7bb9bbb7327497c9599abf50d7732ca4602fa429;p=people%2Fms%2Fipfire-2.x.git

OpenSSH: do not ship ssh-keysign anymore

To my surprise, this binary comes with suid flag set, and since we do
not have SSH key signing enabled, there is no need to ship it with
IPFire.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh
index f2f8ea6c5e..c3666d9148 100644
--- a/config/rootfiles/common/openssh
+++ b/config/rootfiles/common/openssh
@@ -19,7 +19,7 @@ usr/bin/ssh-keygen
 usr/bin/ssh-keyscan
 #usr/lib/openssh
 usr/lib/openssh/sftp-server
-usr/lib/openssh/ssh-keysign
+#usr/lib/openssh/ssh-keysign
 usr/lib/openssh/ssh-pkcs11-helper
 usr/lib/openssh/ssh-sk-helper
 usr/sbin/sshd