[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: our broken man package

Ethan Benson <erbenson@alaska.net> wrote:
>On Wed, Jan 03, 2001 at 11:53:37PM -0800, Joey Hess wrote:
>> I'll bet (have not verified) that you can already trick it into writing
>> bogus file by sticking trojan pages elsewhere in your manpath.
>i just tried it, did not end up with a cached file.  
>[eb@socrates eb]$ export MANPATH=/home/eb/test
>[eb@socrates eb]$ find /var/cache/man -name 'bogus*'
>[eb@socrates eb]$ ls -l /home/eb/test/man8/
>total 8
>-rw-r--r--    1 eb       eb           5193 Jan  3 23:03 bogus.8
>[eb@socrates eb]$ man bogus 
>Reformatting bogus(8), please wait...
>[eb@socrates eb]$ find /var/cache/man -name 'bogus*'

Yes, there's no MANDB_MAP entry in /etc/manpath.config for
/home/eb/test. 'MANPATH=/home/eb/test manpath -c' will tell you the
catpath corresponding to a given manpath.

I don't know if it's possible to subvert this.

Colin Watson                                     [cjw44@flatline.org.uk]

Reply to: