EnableSSHKeysign yes should cause /usr/libexec/openssh/ssh-keysign to be used. ssh-keysign is mode -rwsr-xr-x. However, 'cannot get sockname for fd' is always reported. Making /usr/bin/ssh setuid works around the problem.
↧