Bug 260108

Summary:	net-misc/netkit-fingerd: finger man-page typo may cause newbies to set home directory world-writable
Product:	Gentoo Linux	Reporter:	Ole Christian Tvedt <olechrt>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	CONFIRMED ---
Severity:	normal	CC:	dschridde+gentoobugs, sam
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Man file fix for finger

Description Ole Christian Tvedt 2009-02-24 10:27:04 UTC

The man page of finger (from =net-misc/netkit-fingerd-0.17-r3) says that the users home directory needs to be world-executable for the .nofinger file to be found by finger, which is correct. It also says in parenthesis (o+w), which would not set the execute bit, but the write bit for everyone.

I'm attaching a patch that fixes the typo.

I have tried submitting this upstream, but the mail address given in the README bounces (netbug@ftp.uk.linux.org). As far as I understand, netkit is orphaned.

Reproducible: Always

Steps to Reproduce:

Comment 1 Ole Christian Tvedt 2009-02-24 10:27:47 UTC

Created attachment 183001 [details, diff]
Man file fix for finger