Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: CVS commit: basesrc



Matthias Scheler <tron%netbsd.org@localhost> writes:
> Log Message:
> Use "groff -S -Tascii" instead of "nroff" to avoid security problems
> if "man" is used by "root". Fixes PR security/8069 by Matthias Buelow.

This really didn't fix the entire problem.

In general, groff should be rigged so that "-S" is the default, and a
new option added to turn *off* that functionality.  Otherwise, every
time anyone troff's a document a potential disaster might occur.

Perry



Home | Main Index | Thread Index | Old Index