In FreeBSD-stable and -current, these tricks allow only tojan horses, but do not allow normal users to elevate their privs. It appears that man doesn't run at elevated priviledge levels for execution of the sub-commands needed to build the man pages (despite man being setuid man on FreeBSD-stable/current). I just noticed that OpenBSD added a -S flag which completely disables these commands... I think I like that, in conjunction with having man use that flag... Warner
- Re: Troff dangerous. CyberPsychotic
- Re: Troff dangerous. John Robert LoVerso
- Re: Troff dangerous. Nic Bellamy
- Re: Troff dangerous. Aaron Campbell
- Re: Troff dangerous. Perry E. Metzger
- Re: Troff dangerous. Friedrich Delgado Friedrichs
- Re: Troff dangerous. Olaf Kirch
- Re: Troff dangerous. Julian Squires
- Re: Troff dangerous. Olaf Kirch
- Re: Troff dangerous. Pavel Kankovsky
- Re: Troff dangerous. Warner Losh
- Re: Troff dangerous. Joel Eriksson
- Re: Troff dangerous. Pete
- Re: Troff dangerous. Robert Watson
- Re: Troff dangerous. Henrik Nordstrom
- SGID man Solar Designer
- Re: SGID man Henrik Nordstrom
- Re: SGID man Isaac To
- Re: SGID man Henrik Nordstrom
- Re: Troff dangerous. Yozo Toda
- Re: Troff dangerous. Eric Moore
