Package: dwww
Version: 1.14
Severity: important

Dear Maintainer,

attemtping to access any manual page which happens to be outside of
DWWW_DOCPATH leads to "Access denied: dwww will not allow you to read the file"
page from runman.
Examples are, say, jar.1 manpage from openjdk-11-jdk-headless, which sits at
/usr/lib/jvm/java-11-openjdk-amd64/man/man1, or nvidia manpages in
/usr/lib/nvidia/current. Adding the respective directories (even when they are
below /usr/lib which is in the default allowed path) to DWWW_ALLOWEDLINKPATH
like this:

DWWW_ALLOWEDLINKPATH='/usr/share:/usr/lib:/usr/local/share:/var/www:/usr/lib/nvidia/current:/usr/lib/jvm/java-11-openjdk-amd64/man/man1'

has no effect. Maybe it's a Perl issue, though.

-- System Information:
Debian Release: 11.6
  APT prefers stable-security
  APT policy: (991, 'stable-security'), (991, 'stable'), (99, 'testing'), (90,
'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.3-bootes3-p-1000 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en_US
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages dwww depends on:
ii  apache2 [httpd-cgi]    2.4.54-1~deb11u1
ii  debconf [debconf-2.0]  1.5.77
ii  debianutils            4.11.2
ii  doc-base               0.11.1
ii  file                   1:5.39-3
ii  libc6                  2.31-13+deb11u5
ii  libfile-ncopy-perl     0.36-2.1
ii  libmime-types-perl     2.18-1
ii  man-db                 2.9.4-2
ii  mime-support           3.66
ii  perl                   5.32.1-4+deb11u2
ii  sensible-utils         0.0.14
ii  ucf                    3.0043

Versions of packages dwww recommends:
ii  apache2 [httpd]  2.4.54-1~deb11u1
ii  apt              2.2.4
ii  dlocate          1.07+nmu1
ii  info2www         1.2.2.9-24.1
ii  swish++          6.1.5-5

Versions of packages dwww suggests:
ii  chromium [www-browser]     108.0.5359.124-1~deb11u1
ii  doc-debian                 6.5
ii  dpkg-www                   2.61
ii  edbrowse [www-browser]     3.7.7-2
ii  elinks [www-browser]       0.13.2-1+b1
ii  firefox-esr [www-browser]  102.6.0esr-1~deb11u1
ii  konqueror [www-browser]    4:20.12.0-4
ii  lynx [www-browser]         2.9.0dev.6-3~deb11u1
ii  opera [www-browser]        12.16.1860
ii  w3m [www-browser]          0.5.3+git20210102-6

-- debconf information:
* dwww/index_docs: true
  dwww/nosuchdir:
  dwww/badport:
* dwww/cgidir: /usr/lib/cgi-bin
* dwww/serverport: 80
  dwww/nosuchuser:
* dwww/docrootdir: /var/www
* dwww/cgiuser: www-data

Reply via email to