From owner-freebsd-security  Sun Sep 26  1:41: 7 1999
Delivered-To: freebsd-security@freebsd.org
Received: from mailman.zeta.org.au (mailman.zeta.org.au [203.26.10.16])
	by hub.freebsd.org (Postfix) with ESMTP id B397914C4A
	for <freebsd-security@FreeBSD.ORG>; Sun, 26 Sep 1999 01:41:03 -0700 (PDT)
	(envelope-from bde@zeta.org.au)
Received: from d197.syd2.zeta.org.au (beefcake.zeta.org.au [203.26.10.12])
	by mailman.zeta.org.au (8.8.7/8.8.7) with ESMTP id SAA10234;
	Sun, 26 Sep 1999 18:41:09 +1000
Date: Sun, 26 Sep 1999 18:40:32 +1000 (EST)
From: Bruce Evans <bde@zeta.org.au>
X-Sender: bde@alphplex.bde.org
To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Cc: cjclark@home.com, Matthew Dillon <dillon@apollo.backplane.com>,
	freebsd-security@FreeBSD.ORG
Subject: Re: dump(8) Insecurity/Misconfiguration
In-Reply-To: <199909260216.WAA02587@khavrinen.lcs.mit.edu>
Message-ID: <Pine.BSF.4.10.9909261827060.4642-100000@alphplex.bde.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Sat, 25 Sep 1999, Garrett Wollman wrote:

> <<On Sat, 25 Sep 1999 22:03:23 -0400 (EDT), "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com> said:
> 
> >     "Dump cannot do remote backups without being run as root, due to its secu-
> >      rity history.  This will be fixed in a later version of FreeBSD. Present-
> >      ly, it works if you set it setuid (like it used to be), but this might
> >      constitute a security risk."
> 
> Oof!  Really awful language for a manual page.  (Manual pages should
> never use the second person.)

Where are the man page style guide and the man page style police?  Our man
pages have 5813 lines matching the regexp " [Yy]ou ".  763 of our 3190
man pages contain such a line (counting links multiply).

Bruce



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message