30843b9337
The catpaging and setuidness features of man(1) combined make it vulnerable to a number of security attacks. Specifically, it was possible to overwrite system catpages with arbitrarily contents by either setting up a symlink to a directory holding system catpages, or by writing custom -mdoc or -man groff(1) macro packages and setting up GROFF_TMAC_PATH in environment to point to them. (See PR below for details). This means man(1) can no longer create system catpages on a regular user's behalf. (It is still able to if the user has write permissions to the directory holding catpages, e.g., user's own manpages, or if the running user is ``root''.) To create and install catpages during ``make world'', please set MANBUILDCAT=YES in /etc/make.conf. To rebuild catpages on a weekly basis, please set weekly_catman_enable="YES" in /etc/periodic.conf. PR: bin/32791
1041 lines
20 KiB
Plaintext
1041 lines
20 KiB
Plaintext
# $FreeBSD$
|
|
#
|
|
# Please see the file src/etc/mtree/README before making changes to this file.
|
|
#
|
|
|
|
/set type=dir uname=root gname=wheel mode=0755
|
|
.
|
|
bin
|
|
..
|
|
games
|
|
hide gname=games mode=0550
|
|
..
|
|
..
|
|
include
|
|
..
|
|
lib
|
|
aout
|
|
..
|
|
compat
|
|
aout
|
|
..
|
|
..
|
|
..
|
|
libdata
|
|
doscmd
|
|
fonts
|
|
..
|
|
..
|
|
gcc
|
|
..
|
|
ldscripts
|
|
..
|
|
lint
|
|
..
|
|
msdosfs
|
|
..
|
|
perl
|
|
5.6.0
|
|
B
|
|
..
|
|
CGI
|
|
..
|
|
CPAN
|
|
..
|
|
Carp
|
|
..
|
|
Class
|
|
..
|
|
Data
|
|
..
|
|
Devel
|
|
..
|
|
Exporter
|
|
..
|
|
ExtUtils
|
|
..
|
|
File
|
|
Spec
|
|
..
|
|
..
|
|
Getopt
|
|
..
|
|
I18N
|
|
..
|
|
IO
|
|
..
|
|
IPC
|
|
..
|
|
Math
|
|
..
|
|
Net
|
|
..
|
|
Pod
|
|
Text
|
|
..
|
|
..
|
|
Search
|
|
..
|
|
Sys
|
|
..
|
|
Term
|
|
..
|
|
Test
|
|
..
|
|
Text
|
|
..
|
|
Tie
|
|
..
|
|
Time
|
|
..
|
|
User
|
|
..
|
|
auto
|
|
DB_File
|
|
..
|
|
File
|
|
Glob
|
|
..
|
|
..
|
|
GDBM_File
|
|
..
|
|
Getopt
|
|
Long
|
|
..
|
|
..
|
|
POSIX
|
|
..
|
|
..
|
|
mach
|
|
B
|
|
..
|
|
CORE
|
|
..
|
|
Data
|
|
..
|
|
IO
|
|
Socket
|
|
..
|
|
..
|
|
IPC
|
|
..
|
|
arpa
|
|
..
|
|
auto
|
|
B
|
|
..
|
|
DB_File
|
|
..
|
|
Data
|
|
Dumper
|
|
..
|
|
..
|
|
DynaLoader
|
|
..
|
|
Fcntl
|
|
..
|
|
IO
|
|
..
|
|
IPC
|
|
SysV
|
|
..
|
|
..
|
|
NDBM_File
|
|
..
|
|
Opcode
|
|
..
|
|
POSIX
|
|
..
|
|
SDBM_File
|
|
..
|
|
Socket
|
|
..
|
|
attrs
|
|
..
|
|
re
|
|
..
|
|
sdbm
|
|
..
|
|
..
|
|
..
|
|
pod
|
|
..
|
|
unicode
|
|
In
|
|
..
|
|
Is
|
|
..
|
|
To
|
|
..
|
|
..
|
|
warnings
|
|
..
|
|
..
|
|
BSDPAN
|
|
BSDPAN
|
|
..
|
|
ExtUtils
|
|
..
|
|
..
|
|
..
|
|
stallion
|
|
..
|
|
..
|
|
libexec
|
|
aout
|
|
..
|
|
elf
|
|
..
|
|
lpr
|
|
ru
|
|
..
|
|
..
|
|
sendmail
|
|
..
|
|
sm.bin
|
|
..
|
|
..
|
|
local
|
|
..
|
|
obj nochange
|
|
..
|
|
sbin
|
|
..
|
|
share
|
|
calendar
|
|
de_DE.ISO8859-1
|
|
..
|
|
hr_HR.ISO8859-2
|
|
..
|
|
ru_RU.KOI8-R
|
|
..
|
|
..
|
|
dict
|
|
..
|
|
doc
|
|
IPv6
|
|
..
|
|
bind
|
|
html
|
|
..
|
|
misc
|
|
..
|
|
..
|
|
ncurses
|
|
..
|
|
ntp
|
|
..
|
|
papers
|
|
..
|
|
psd
|
|
05.sysman
|
|
..
|
|
12.make
|
|
..
|
|
13.rcs
|
|
..
|
|
18.gprof
|
|
..
|
|
20.ipctut
|
|
..
|
|
21.ipc
|
|
..
|
|
22.rpcgen
|
|
..
|
|
23.rpc
|
|
..
|
|
24.xdr
|
|
..
|
|
25.xdrrfc
|
|
..
|
|
26.rpcrfc
|
|
..
|
|
27.nfsrfc
|
|
..
|
|
28.cvs
|
|
..
|
|
..
|
|
smm
|
|
01.setup
|
|
..
|
|
02.config
|
|
..
|
|
03.fsck
|
|
..
|
|
04.quotas
|
|
..
|
|
05.fastfs
|
|
..
|
|
06.nfs
|
|
..
|
|
07.lpd
|
|
..
|
|
08.sendmailop
|
|
..
|
|
10.named
|
|
..
|
|
11.timedop
|
|
..
|
|
12.timed
|
|
..
|
|
18.net
|
|
..
|
|
..
|
|
usd
|
|
04.csh
|
|
..
|
|
07.mail
|
|
..
|
|
10.exref
|
|
..
|
|
11.edit
|
|
..
|
|
12.vi
|
|
..
|
|
13.viref
|
|
..
|
|
18.msdiffs
|
|
..
|
|
19.memacros
|
|
..
|
|
20.meref
|
|
..
|
|
30.rogue
|
|
..
|
|
31.trek
|
|
..
|
|
..
|
|
..
|
|
examples
|
|
BSD_daemon
|
|
..
|
|
FreeBSD_version
|
|
..
|
|
IPv6
|
|
..
|
|
atm
|
|
..
|
|
bc
|
|
..
|
|
bootforth
|
|
..
|
|
cvs
|
|
contrib
|
|
..
|
|
..
|
|
cvsup
|
|
..
|
|
dialog
|
|
..
|
|
diskless
|
|
209.157.86.12
|
|
..
|
|
HT.DISKLESS
|
|
..
|
|
HT.STD
|
|
..
|
|
archive.backplane.com
|
|
..
|
|
..
|
|
drivers
|
|
..
|
|
etc
|
|
defaults
|
|
..
|
|
..
|
|
find_interface
|
|
..
|
|
ibcs2
|
|
..
|
|
ipfilter
|
|
..
|
|
ipfw
|
|
..
|
|
isdn
|
|
contrib
|
|
..
|
|
i4brunppp
|
|
..
|
|
v21
|
|
..
|
|
..
|
|
kld
|
|
cdev
|
|
module
|
|
..
|
|
test
|
|
..
|
|
..
|
|
dyn_sysctl
|
|
module
|
|
..
|
|
..
|
|
syscall
|
|
module
|
|
..
|
|
test
|
|
..
|
|
..
|
|
..
|
|
libdialog
|
|
..
|
|
libvgl
|
|
..
|
|
mdoc
|
|
..
|
|
meteor
|
|
..
|
|
netgraph
|
|
..
|
|
nwclient
|
|
..
|
|
perfmon
|
|
..
|
|
portal
|
|
..
|
|
ppi
|
|
..
|
|
ppp
|
|
..
|
|
printing
|
|
..
|
|
scsi_target
|
|
..
|
|
ses
|
|
getencstat
|
|
..
|
|
sesd
|
|
..
|
|
setencstat
|
|
..
|
|
setobjstat
|
|
..
|
|
srcs
|
|
..
|
|
..
|
|
slattach
|
|
..
|
|
sliplogin
|
|
..
|
|
smbfs
|
|
print
|
|
..
|
|
..
|
|
startslip
|
|
..
|
|
sunrpc
|
|
dir
|
|
..
|
|
msg
|
|
..
|
|
sort
|
|
..
|
|
..
|
|
worm
|
|
..
|
|
..
|
|
games
|
|
atc
|
|
..
|
|
fortune
|
|
..
|
|
larn
|
|
..
|
|
quiz.db
|
|
..
|
|
..
|
|
groff_font
|
|
devX100
|
|
..
|
|
devX100-12
|
|
..
|
|
devX75
|
|
..
|
|
devX75-12
|
|
..
|
|
devascii
|
|
..
|
|
devcp1047
|
|
..
|
|
devdvi
|
|
..
|
|
devhtml
|
|
..
|
|
devkoi8-r
|
|
..
|
|
devlatin1
|
|
..
|
|
devlbp
|
|
..
|
|
devlj4
|
|
..
|
|
devps
|
|
..
|
|
devutf8
|
|
..
|
|
..
|
|
info
|
|
..
|
|
isdn
|
|
..
|
|
libg++
|
|
..
|
|
locale
|
|
af_ZA.ISO8859-1
|
|
..
|
|
af_ZA.ISO8859-15
|
|
..
|
|
bg_BG.CP1251
|
|
..
|
|
cs_CZ.ISO8859-2
|
|
..
|
|
da_DK.ISO8859-1
|
|
..
|
|
da_DK.ISO8859-15
|
|
..
|
|
de_AT.ISO8859-1
|
|
..
|
|
de_AT.ISO8859-15
|
|
..
|
|
de_CH.ISO8859-1
|
|
..
|
|
de_CH.ISO8859-15
|
|
..
|
|
de_DE.ISO8859-1
|
|
..
|
|
de_DE.ISO8859-15
|
|
..
|
|
el_GR.ISO8859-7
|
|
..
|
|
en_AU.ISO8859-1
|
|
..
|
|
en_AU.ISO8859-15
|
|
..
|
|
en_AU.US-ASCII
|
|
..
|
|
en_CA.ISO8859-1
|
|
..
|
|
en_CA.ISO8859-15
|
|
..
|
|
en_CA.US-ASCII
|
|
..
|
|
en_GB.ISO8859-1
|
|
..
|
|
en_GB.ISO8859-15
|
|
..
|
|
en_GB.US-ASCII
|
|
..
|
|
en_NZ.ISO8859-1
|
|
..
|
|
en_NZ.ISO8859-15
|
|
..
|
|
en_NZ.US-ASCII
|
|
..
|
|
en_US.ISO8859-1
|
|
..
|
|
en_US.ISO8859-15
|
|
..
|
|
en_US.US-ASCII
|
|
..
|
|
es_ES.ISO8859-1
|
|
..
|
|
es_ES.ISO8859-15
|
|
..
|
|
et_EE.ISO8859-15
|
|
..
|
|
fi_FI.ISO8859-1
|
|
..
|
|
fi_FI.ISO8859-15
|
|
..
|
|
fr_BE.ISO8859-1
|
|
..
|
|
fr_BE.ISO8859-15
|
|
..
|
|
fr_CA.ISO8859-1
|
|
..
|
|
fr_CA.ISO8859-15
|
|
..
|
|
fr_CH.ISO8859-1
|
|
..
|
|
fr_CH.ISO8859-15
|
|
..
|
|
fr_FR.ISO8859-1
|
|
..
|
|
fr_FR.ISO8859-15
|
|
..
|
|
hi_IN.ISCII-DEV
|
|
..
|
|
hr_HR.ISO8859-2
|
|
..
|
|
hu_HU.ISO8859-2
|
|
..
|
|
is_IS.ISO8859-1
|
|
..
|
|
is_IS.ISO8859-15
|
|
..
|
|
it_CH.ISO8859-1
|
|
..
|
|
it_CH.ISO8859-15
|
|
..
|
|
it_IT.ISO8859-1
|
|
..
|
|
it_IT.ISO8859-15
|
|
..
|
|
ja_JP.SJIS
|
|
..
|
|
ja_JP.eucJP
|
|
..
|
|
ko_KR.eucKR
|
|
..
|
|
la_LN.ISO8859-1
|
|
..
|
|
la_LN.ISO8859-15
|
|
..
|
|
la_LN.ISO8859-2
|
|
..
|
|
la_LN.ISO8859-4
|
|
..
|
|
la_LN.US-ASCII
|
|
..
|
|
lt_LT.ISO8859-4
|
|
..
|
|
nl_BE.ISO8859-1
|
|
..
|
|
nl_BE.ISO8859-15
|
|
..
|
|
nl_NL.ISO8859-1
|
|
..
|
|
nl_NL.ISO8859-15
|
|
..
|
|
no_NO.ISO8859-1
|
|
..
|
|
no_NO.ISO8859-15
|
|
..
|
|
pl_PL.ISO8859-2
|
|
..
|
|
pt_PT.ISO8859-1
|
|
..
|
|
pt_PT.ISO8859-15
|
|
..
|
|
ro_RO.ISO8859-2
|
|
..
|
|
ru_RU.CP866
|
|
..
|
|
ru_RU.ISO8859-5
|
|
..
|
|
ru_RU.KOI8-R
|
|
..
|
|
sk_SK.ISO8859-2
|
|
..
|
|
sl_SI.ISO8859-2
|
|
..
|
|
sv_SE.ISO8859-1
|
|
..
|
|
sv_SE.ISO8859-15
|
|
..
|
|
tr_TR.ISO8859-9
|
|
..
|
|
uk_UA.ISO8859-5
|
|
..
|
|
uk_UA.KOI8-U
|
|
..
|
|
zh_CN.eucCN
|
|
..
|
|
zh_TW.Big5
|
|
..
|
|
..
|
|
man
|
|
cat1
|
|
..
|
|
cat1aout
|
|
..
|
|
cat2
|
|
..
|
|
cat3
|
|
..
|
|
cat4
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
cat5
|
|
..
|
|
cat6
|
|
..
|
|
cat7
|
|
..
|
|
cat8
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
cat9
|
|
i386
|
|
..
|
|
..
|
|
catn
|
|
..
|
|
en.ISO8859-1
|
|
cat1
|
|
..
|
|
cat1aout
|
|
..
|
|
cat2
|
|
..
|
|
cat3
|
|
..
|
|
cat4
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
cat5
|
|
..
|
|
cat6
|
|
..
|
|
cat7
|
|
..
|
|
cat8
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
cat9
|
|
i386
|
|
..
|
|
..
|
|
catn
|
|
..
|
|
..
|
|
ja
|
|
cat1
|
|
..
|
|
cat2
|
|
..
|
|
cat3
|
|
..
|
|
cat4
|
|
..
|
|
cat5
|
|
..
|
|
cat6
|
|
..
|
|
cat7
|
|
..
|
|
cat8
|
|
..
|
|
cat9
|
|
..
|
|
catn
|
|
..
|
|
man1
|
|
..
|
|
man2
|
|
..
|
|
man3
|
|
..
|
|
man4
|
|
..
|
|
man5
|
|
..
|
|
man6
|
|
..
|
|
man7
|
|
..
|
|
man8
|
|
..
|
|
man9
|
|
..
|
|
mann
|
|
..
|
|
..
|
|
man1
|
|
..
|
|
man1aout
|
|
..
|
|
man2
|
|
..
|
|
man3
|
|
..
|
|
man4
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
man5
|
|
..
|
|
man6
|
|
..
|
|
man7
|
|
..
|
|
man8
|
|
alpha
|
|
..
|
|
i386
|
|
..
|
|
..
|
|
man9
|
|
i386
|
|
..
|
|
..
|
|
mann
|
|
..
|
|
..
|
|
me
|
|
..
|
|
misc
|
|
fonts
|
|
..
|
|
pcvtfonts
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
nls
|
|
C
|
|
..
|
|
af_ZA.ISO8859-1
|
|
..
|
|
af_ZA.ISO8859-15
|
|
..
|
|
bg_BG.CP1251
|
|
..
|
|
cs_CZ.ISO8859-2
|
|
..
|
|
da_DK.ISO8859-1
|
|
..
|
|
da_DK.ISO8859-15
|
|
..
|
|
de_AT.ISO8859-1
|
|
..
|
|
de_AT.ISO8859-15
|
|
..
|
|
de_CH.ISO8859-1
|
|
..
|
|
de_CH.ISO8859-15
|
|
..
|
|
de_DE.ISO8859-1
|
|
..
|
|
de_DE.ISO8859-15
|
|
..
|
|
el_GR.ISO8859-7
|
|
..
|
|
en_AU.ISO8859-1
|
|
..
|
|
en_AU.ISO8859-15
|
|
..
|
|
en_AU.US-ASCII
|
|
..
|
|
en_CA.ISO8859-1
|
|
..
|
|
en_CA.ISO8859-15
|
|
..
|
|
en_CA.US-ASCII
|
|
..
|
|
en_GB.ISO8859-1
|
|
..
|
|
en_GB.ISO8859-15
|
|
..
|
|
en_GB.US-ASCII
|
|
..
|
|
en_NZ.ISO8859-1
|
|
..
|
|
en_NZ.ISO8859-15
|
|
..
|
|
en_NZ.US-ASCII
|
|
..
|
|
en_US.ISO8859-1
|
|
..
|
|
en_US.ISO8859-15
|
|
..
|
|
es_ES.ISO8859-1
|
|
..
|
|
es_ES.ISO8859-15
|
|
..
|
|
et_EE.ISO8859-15
|
|
..
|
|
fi_FI.ISO8859-1
|
|
..
|
|
fi_FI.ISO8859-15
|
|
..
|
|
fr_BE.ISO8859-1
|
|
..
|
|
fr_BE.ISO8859-15
|
|
..
|
|
fr_CA.ISO8859-1
|
|
..
|
|
fr_CA.ISO8859-15
|
|
..
|
|
fr_CH.ISO8859-1
|
|
..
|
|
fr_CH.ISO8859-15
|
|
..
|
|
fr_FR.ISO8859-1
|
|
..
|
|
fr_FR.ISO8859-15
|
|
..
|
|
hi_IN.ISCII-DEV
|
|
..
|
|
hr_HR.ISO8859-2
|
|
..
|
|
hu_HU.ISO8859-2
|
|
..
|
|
is_IS.ISO8859-1
|
|
..
|
|
is_IS.ISO8859-15
|
|
..
|
|
it_CH.ISO8859-1
|
|
..
|
|
it_CH.ISO8859-15
|
|
..
|
|
it_IT.ISO8859-1
|
|
..
|
|
it_IT.ISO8859-15
|
|
..
|
|
ja_JP.SJIS
|
|
..
|
|
ja_JP.eucJP
|
|
..
|
|
ko_KR.eucKR
|
|
..
|
|
la_LN.ISO8859-1
|
|
..
|
|
la_LN.ISO8859-15
|
|
..
|
|
la_LN.ISO8859-2
|
|
..
|
|
la_LN.ISO8859-4
|
|
..
|
|
la_LN.US-ASCII
|
|
..
|
|
lt_LT.ISO8859-4
|
|
..
|
|
nl_BE.ISO8859-1
|
|
..
|
|
nl_BE.ISO8859-15
|
|
..
|
|
nl_NL.ISO8859-1
|
|
..
|
|
nl_NL.ISO8859-15
|
|
..
|
|
no_NO.ISO8859-1
|
|
..
|
|
no_NO.ISO8859-15
|
|
..
|
|
pl_PL.ISO8859-2
|
|
..
|
|
pt_PT.ISO8859-1
|
|
..
|
|
pt_PT.ISO8859-15
|
|
..
|
|
ro_RO.ISO8859-2
|
|
..
|
|
ru_RU.CP866
|
|
..
|
|
ru_RU.ISO8859-5
|
|
..
|
|
ru_RU.KOI8-R
|
|
..
|
|
sk_SK.ISO8859-2
|
|
..
|
|
sl_SI.ISO8859-2
|
|
..
|
|
sv_SE.ISO8859-1
|
|
..
|
|
sv_SE.ISO8859-15
|
|
..
|
|
tr_TR.ISO8859-9
|
|
..
|
|
uk_UA.ISO8859-5
|
|
..
|
|
uk_UA.KOI8-U
|
|
..
|
|
zh_CN.eucCN
|
|
..
|
|
zh_TW.Big5
|
|
..
|
|
..
|
|
pcvt
|
|
Doc
|
|
..
|
|
Etc
|
|
..
|
|
..
|
|
perl
|
|
man
|
|
cat3
|
|
..
|
|
man3
|
|
..
|
|
..
|
|
..
|
|
sendmail
|
|
..
|
|
skel
|
|
..
|
|
syscons
|
|
fonts
|
|
..
|
|
keymaps
|
|
..
|
|
scrnmaps
|
|
..
|
|
..
|
|
tabset
|
|
..
|
|
tmac
|
|
mdoc
|
|
..
|
|
mm
|
|
..
|
|
..
|
|
vi
|
|
catalog
|
|
..
|
|
perl
|
|
..
|
|
tcl
|
|
..
|
|
..
|
|
zoneinfo
|
|
Africa
|
|
..
|
|
America
|
|
Indiana
|
|
..
|
|
Kentucky
|
|
..
|
|
North_Dakota
|
|
..
|
|
..
|
|
Antarctica
|
|
..
|
|
Arctic
|
|
..
|
|
Asia
|
|
..
|
|
Atlantic
|
|
..
|
|
Australia
|
|
..
|
|
Etc
|
|
..
|
|
Europe
|
|
..
|
|
Indian
|
|
..
|
|
Pacific
|
|
..
|
|
SystemV
|
|
..
|
|
..
|
|
..
|
|
src nochange
|
|
..
|
|
..
|