From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from www.sonnenberger.org (www.sonnenberger.org [92.79.50.50]) by krisdoz.my.domain (8.14.3/8.14.3) with ESMTP id o9PM9eVX026596 for ; Mon, 25 Oct 2010 18:09:41 -0400 (EDT) Received: from britannica.bec.de (www.sonnenberger.org [192.168.1.10]) by www.sonnenberger.org (Postfix) with ESMTP id 445D2667CB for ; Tue, 26 Oct 2010 00:09:33 +0200 (CEST) Received: by britannica.bec.de (Postfix, from userid 1000) id DD8D0117EBB; Tue, 26 Oct 2010 00:10:17 +0200 (CEST) Date: Tue, 26 Oct 2010 00:10:17 +0200 From: Joerg Sonnenberger To: tech@mdocml.bsd.lv Subject: Re: implement .so Message-ID: <20101025221017.GA6533@britannica.bec.de> Mail-Followup-To: tech@mdocml.bsd.lv References: <20101024164057.GF20876@iris.usta.de> <20101024164945.GA25275@britannica.bec.de> <20101024172914.GH20876@iris.usta.de> <20101024173857.GA18657@britannica.bec.de> <20101024180019.GI20876@iris.usta.de> <20101024181502.GA13039@britannica.bec.de> <20101024194129.GJ20876@iris.usta.de> <20101024195135.GA1809@britannica.bec.de> <20101025215506.GA12557@iris.usta.de> X-Mailinglist: mdocml-tech Reply-To: tech@mdocml.bsd.lv MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20101025215506.GA12557@iris.usta.de> User-Agent: Mutt/1.5.20 (2009-06-14) On Mon, Oct 25, 2010 at 11:55:06PM +0200, Ingo Schwarze wrote: > > Sorry, yes. Only allow relative path names without /../ components. > > Actually, it is even worse. > All ports in the OpenBSD ports tree using the feature give the path > relative to the *parent* directory of the directory containing the > manual page having the .so directive. > > So these are neither absolute paths (relative to the root of the > file system) nor relative paths (relative to the current working > directory). The current working directory for man is /usr/share/man etc. and that's inherited by the renderer. Joerg -- To unsubscribe send an email to tech+unsubscribe@mdocml.bsd.lv