Date: Thu, 17 Jan 2002 05:57:23 +1300 (NZDT) From: Dan Langille <dan@langille.org> To: Ruslan Ermilov <ru@FreeBSD.ORG> Cc: Joerg Wunsch <j@uriah.heep.sax.de>, <cvs-committers@FreeBSD.ORG>, <cvs-all@FreeBSD.ORG>, <arch@FreeBSD.ORG> Subject: Re: cvs commit: src/gnu/usr.bin/man/man Makefile man.c src/etc/mtree BSD.local.dist BSD.usr.dist BSD.x11-4.dist BSD.x11.dist Message-ID: <20020117053925.A18072-100000@lists.unixathome.org> In-Reply-To: <20020116183712.G13904@sunbay.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 16 Jan 2002, Ruslan Ermilov wrote: > On Wed, Jan 16, 2002 at 05:11:44PM +0100, Joerg Wunsch wrote: > > Get me right, it's OK by me to put a big warning above that knob > > into /etc/defaults/make.conf. But for sites less concerned about > > security (like my home computer), compromising the "man" account > > by the only other user on my machine (that's my wife :) isn't > > anything i would care much about. Even though the machine is > > pretty fast, i prefer the cached catpages for efficiency. (setuid > > root binaries are a totally different matter, since they might > > always serve as a target by a potential intruder. But i don't > > think such an intruder would gain much by breaking a setuid man > > man(1), and then replace all my catpages. ;-) > > > OK, what do others think about this? We've had users coming into IRC channels asking about the man page changes. I don't fully understand the implications yet. From the comments above, it sounds like each time I issue 'man ls', it's going to decompress the man page unless I do some tweaking. Is that correct? If so, that's not good for me, and I suspect for a large number of other people. Else, please ignore the next paragraph. Please don't force the majority of people to tweak their systems in order to avoid a theoretical problem for a small minority. But if you insist upon doing so, then I feel you must provide a knob in /etc/defaults/make.conf. I have read the commit message, but I don't have the knowledge to understand the implications. Perhaps someone could explain it so I and others can understand what this change really means. thanks. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020117053925.A18072-100000>