On 2023/01/08 22:28, Thomas Dettbarn wrote: > However, my original post was an idea about enhancing security by compiling > everything as non-root by default.
Diffs to improve things that don't break existing setup are welcome, but would likely be complicated. The recommended way to build ports is with uid _pbuild which is done by setting PORTS_PRIVSEP=Yes in mk.conf, see the PORTS_PRIVSEP section in bsd.port.mk(5) for info. Slightly less good building as your own uid; building as root is not at all a good idea.
