#16911: git-core requiring macports' ssh on leopard, openssh security concern ---------------------------------+------------------------------------------ Reporter: bcbarnes@gmail.com | Owner: macports-tickets@lists.macosforge.org Type: defect | Status: closed Priority: Normal | Milestone: Port Bugs Component: ports | Version: 1.6.0 Resolution: fixed | Keywords: Port: git-core | ---------------------------------+------------------------------------------ Comment(by ryandesign@macports.org): Replying to [comment:14 bcbarnes@…]:
Ah, if it's not entirely obvious by now, my concern I suppose has more to do with the openssh port than the git-core port. Perhaps the openssh maintainer should be cc'd on this if he is not already. Removing the dependency for the git-core port mitigates the problem for me right now (and I'm entirely happy with that change), but anyone installing openssh via macports is subjected to my security concerns talked about above. I do not know what other ports, if any, require the openssh port as a dependency. openssh has no maintainer, so anybody should feel free to make appropriate changes to it. sshfs and dsh declare a port dependency on openssh, while dsocks, scponly and rsnapshot only declare a binary dependency on ssh, falling back to the openssh port if necessary.
-- Ticket URL: <http://trac.macports.org/ticket/16911#comment:16> MacPorts <http://www.macports.org/> Ports system for Mac OS