[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Groff] Insecurity

From: Werner LEMBERG
Subject: Re: [Groff] Insecurity
Date: Fri, 14 Apr 2000 22:56:26 +0000 (GMT)

> In a previous mail, I mentioned an article on man-insecurities in
> Linux- Magazin.  I searched for the name `Pawel
> Wilk' mentioned inthe article and found mayn interesting troff
> discussions in mail archives.
> Moreover, the link
> describes how to install a trojan horse together with a corrupted
> man page.  This could be easily prohibited by checksums, but for
> non-distribution files the danger remains.

With the next groff release this will be no longer possible because
the -S option of groff is now default, disabling .opena, .sy, .pso,
and friends.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]