From 7cc8320ab274f9735165fd58772d393e4cf8f398 Mon Sep 17 00:00:00 2001
From: "Tim J. Robbins" <tjr@FreeBSD.org>
Date: Tue, 28 May 2002 08:04:50 +0000
Subject: [PATCH] Document the ENABLE_SUID_NEWGRP variable.

Requested by:	mike
PR:		36190
---
 share/examples/etc/make.conf | 4 ++++
 share/man/man5/make.conf.5   | 8 ++++++++
 2 files changed, 12 insertions(+)

diff --git a/share/examples/etc/make.conf b/share/examples/etc/make.conf
index db08016e6dac..3052bea1c226 100644
--- a/share/examples/etc/make.conf
+++ b/share/examples/etc/make.conf
@@ -85,6 +85,10 @@
 # To enable installing ssh(1) with the setuid bit turned on
 #ENABLE_SUID_SSH=	true
 #
+# To enable installing newgrp(1) with the setuid bit turned on.
+# Without the setuid bit, newgrp cannot change users' groups.
+#ENABLE_SUID_NEWGRP=	true
+#
 # To avoid building various parts of the base system:
 #NO_CVS=	true	# do not build CVS
 #NO_CXX=	true	# do not build C++ and friends
diff --git a/share/man/man5/make.conf.5 b/share/man/man5/make.conf.5
index d9fefa5fa033..774a93b4c2ce 100644
--- a/share/man/man5/make.conf.5
+++ b/share/man/man5/make.conf.5
@@ -352,6 +352,14 @@ port(s).
 .Pq Vt bool
 Set this if you wish to use the k5su utility.  Otherwise, it will be
 installed without the set-user-ID bit set.
+.It Va ENABLE_SUID_NEWGRP
+.Pq Vt bool
+Set this to install
+.Xr newgrp 1
+with the set-user-ID bit set.
+Otherwise,
+.Xr newgrp 1
+will not be able to change users' groups.
 .It Va MODULES_WITH_WORLD
 .Pq Vt bool
 Set to build modules with the system instead of the kernel.