Date: Wed, 23 Jan 2002 10:57:19 +1030 From: Greg Lehey <grog@FreeBSD.org> To: Ruslan Ermilov <ru@FreeBSD.ORG> Cc: Robert Watson <rwatson@FreeBSD.ORG>, Nate Williams <nate@yogotech.com>, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, arch@FreeBSD.ORG Subject: Re: cvs commit: src/gnu/usr.bin/man/man Makefile man.c src/etc/mtree BSD.local.dist BSD.usr.dist BSD.x11-4.dist BSD.x11.dist Message-ID: <20020123105719.J31684@wantadilla.lemis.com> In-Reply-To: <20020122105839.C78733@sunbay.com> References: <15436.42142.53176.44467@caddis.yogotech.com> <Pine.NEB.3.96L.1020121183943.69509T-100000@fledge.watson.org> <20020122105839.C78733@sunbay.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday, 22 January 2002 at 10:58:39 +0200, Ruslan Ermilov wrote: > On Mon, Jan 21, 2002 at 06:54:02PM -0500, Robert Watson wrote: >> For compatibility purposes, it might be reasonable to install man >> non-setuid, but still have the cat pages and directories be installed as >> the man user. Then twiddling man to setuid man from bin/bin would still >> work for those wanting to enable it. However, for the default install, we >> should either rely purely on nroff source, or also install the catman >> distribution. >> > OK, here's what I will do: > > 1. Restore man.c's SETUID code but do not enable it. > > 2. Fix SETUID code so that: > > a) system catpages are created in a pristine environment > (/usr/bin/env -i) > > b) SETUID path is only attempted for system catpages > > 3. Provide make.conf knob (ENABLE_SUID_MAN) for installing > man(1) ``setuid man''. > > a) will fix the environment race, b) will fix the symlink race. > I've already implemented a), and will post a patch here when > b) is also implemented. That looks like a good solution. Greg -- See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020123105719.J31684>