Re: our broken man package

[cjw44@flatline.org.uk (Colin Watson)]

Ethan Benson <erbenson@alaska.net> wrote:
>On Wed, Jan 03, 2001 at 11:53:37PM -0800, Joey Hess wrote:
>> I'll bet (have not verified) that you can already trick it into writing
>> bogus file by sticking trojan pages elsewhere in your manpath.
>
>i just tried it, did not end up with a cached file.  
>
>[eb@socrates eb]$ export MANPATH=/home/eb/test
>[eb@socrates eb]$ find /var/cache/man -name 'bogus*'
>[eb@socrates eb]$ ls -l /home/eb/test/man8/
>total 8
>-rw-r--r--    1 eb       eb           5193 Jan  3 23:03 bogus.8
>[eb@socrates eb]$ man bogus 
>Reformatting bogus(8), please wait...
>...
>[eb@socrates eb]$ find /var/cache/man -name 'bogus*'

Yes, there's no MANDB_MAP entry in /etc/manpath.config for
/home/eb/test. 'MANPATH=/home/eb/test manpath -c' will tell you the
catpath corresponding to a given manpath.

I don't know if it's possible to subvert this.

-- 
Colin Watson                                     [cjw44@flatline.org.uk]