Allow --without-privsep build.

Damien Miller djm at mindrot.org
Sun Jan 8 12:15:19 EST 2006


David Woodhouse wrote:
> I've been trying to cut down the size of openssh so I can run it on my
> Nokia 770. One thing which helps a fair amount (and will help even more
> when I get '-ffunction-sections -fdata-sections --gc-sections' working)
> is to have the option of compiling out privilege separation...
> 
> Is it worth me tidying this up and trying to make it apply properly to
> the OpenBSD version? 

Probably not, we aren't interested in removing security features for
size benefits. Making things like compression, SSH1, X forwarding, etc.
optional would stand a better chance though.

> Does the openbsd version even use autocrap?

No, it is an island of sanity.

-d




More information about the openssh-unix-dev mailing list