Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 260108 - net-misc/netkit-fingerd: finger man-page typo may cause newbies to set home directory world-writable
Summary: net-misc/netkit-fingerd: finger man-page typo may cause newbies to set home d...
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-24 10:27 UTC by Ole Christian Tvedt
Modified: 2021-02-27 16:20 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Man file fix for finger (finger_man_file_nofinger_security.patch,606 bytes, patch)
2009-02-24 10:27 UTC, Ole Christian Tvedt
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Ole Christian Tvedt 2009-02-24 10:27:04 UTC
The man page of finger (from =net-misc/netkit-fingerd-0.17-r3) says that the users home directory needs to be world-executable for the .nofinger file to be found by finger, which is correct. It also says in parenthesis (o+w), which would not set the execute bit, but the write bit for everyone.

I'm attaching a patch that fixes the typo.

I have tried submitting this upstream, but the mail address given in the README bounces (netbug@ftp.uk.linux.org). As far as I understand, netkit is orphaned.

Reproducible: Always

Steps to Reproduce:
Comment 1 Ole Christian Tvedt 2009-02-24 10:27:47 UTC
Created attachment 183001 [details, diff]
Man file fix for finger