[MacPorts] #16911: git-core requiring macports' ssh on leopard, openssh security concern

[MacPorts]

#16911: git-core requiring macports' ssh on leopard, openssh security concern
---------------------------------+------------------------------------------
  Reporter:  bcbarnes at gmail.com  |       Owner:  macports-tickets at lists.macosforge.org
      Type:  defect              |      Status:  new                                  
  Priority:  Normal              |   Milestone:  Port Bugs                            
 Component:  ports               |     Version:  1.6.0                                
Resolution:                      |    Keywords:                                       
      Port:                      |  
---------------------------------+------------------------------------------

Comment(by bcbarnes at gmail.com):

 Replying to [comment:1 blb@…]:
 > I definitely wouldn't call it hijacking as /usr/bin/ssh is still present
 and usable just as before.  Feel free to rearrange your PATH as needed, as
 /opt/local/bin isn't an absolute requirement (it just makes it easier when
 you want something installed from MacPorts to override something installed
 with the system).

 I removed git-core, changed the PATH as suggested, and
 recompiled/installed git-core.  Everything works fine; the macports
 binaries of openssh are apparently not required for git to function
 properly on OS X 10.5.5 (intel).  If that is true, I would prefer that
 they were not installed...

 I still find it slightly bad that the postflight script puts the macports
 path first, and then some ports replace critical system utilities.  In
 what other cases does this happen?  Is there a list?

-- 
Ticket URL: <http://trac.macports.org/ticket/16911#comment:3>
MacPorts <http://www.macports.org/>
Ports system for Mac OS