[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: man-db cron.daily job



On Sun, Sep 30, 2001 at 07:30:57AM -0500, Colin Watson wrote:
> On Sat, Sep 29, 2001 at 02:42:33AM +0100, Carlos Sousa wrote:
> > my 'man' apparently runs with root privileges:
> > 
> > $ ll /usr/lib/man-db
> > total 220
> > drwxr-xr-x    2 root     root         4096 Sep 26 00:55 ./
> > drwxr-xr-x  131 root     root        36864 Sep 26 14:33 ../
> > -rwxr-xr-x    1 root     root        90684 Sep 19 02:20 man*     <==
> > -rwxr-xr-x    1 root     root        70844 Sep 19 02:20 mandb*
> > -rwxr-xr-x    1 root     root         4328 Sep 19 02:20 wrapper*
> 
> No, the binary's just owned by root, and isn't setuid. No problem there.
> 
> Oh, I guess man won't be dropping privileges, then, as it's configured
> to when it's setuid ... that could explain this bug. Better fix that
> before woody releases.

This was enough of a clue for me to work out why /var/cache/man/*
directories sometimes end up owned by root. It's now fixed in man-db
2.3.20-4 in unstable.

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]



Reply to: