Ethan Benson <[EMAIL PROTECTED]> wrote:
>On Wed, Jan 03, 2001 at 11:53:37PM -0800, Joey Hess wrote:
>> I'll bet (have not verified) that you can already trick it into writing
>> bogus file by sticking trojan pages elsewhere in your manpath.
>
>i just tried it, did not end up with a cached file.  
>
>[EMAIL PROTECTED] eb]$ export MANPATH=/home/eb/test
>[EMAIL PROTECTED] eb]$ find /var/cache/man -name 'bogus*'
>[EMAIL PROTECTED] eb]$ ls -l /home/eb/test/man8/
>total 8
>-rw-r--r--    1 eb       eb           5193 Jan  3 23:03 bogus.8
>[EMAIL PROTECTED] eb]$ man bogus 
>Reformatting bogus(8), please wait...
>...
>[EMAIL PROTECTED] eb]$ find /var/cache/man -name 'bogus*'

Yes, there's no MANDB_MAP entry in /etc/manpath.config for
/home/eb/test. 'MANPATH=/home/eb/test manpath -c' will tell you the
catpath corresponding to a given manpath.

I don't know if it's possible to subvert this.

-- 
Colin Watson                                     [EMAIL PROTECTED]


Reply via email to