Use safer path (except for config files) if -U isn't specified. Add

a special macro path (without home and current directory) for config
files.  Add home directory to unsafe path for consistency.  Don't
include the home directory in the font path.

* src/lib/libgroff/macropath.cc: Add `config_macro_path', change
`macro_path'.
* src/include/macropath.h: Add `config_macrp_path'.
* src/lib/libgroff/fontfile.cc: Fix font path.
* src/roff/troff/input.cc (process_startup_file): Use
`config_macro_path'.
(main): Select unsafe path if -U is given.

* src/preproc/eqn/main.cc (main): Fixing search path for
configuration file.
* src/preproc/eqn/eqn.man: Updated.

* src/roff/troff/troff.man, man/roff.man, tmac/groff_tmac.man:
Updated.

* src/preproc/grn/grn.man, src/devices/grodvi/grodvi.man,
src/devices/grohtml/grohtml.man, src/devices/grolbp/grplbp.man,
src/devices/grolj4/grolj4.man, src/devices/grops/grops.man,
src/devices/grotty/grotty.man: Updated.

* Makefile.in: Fix comments.

src/roff/groff/groff.man, tmac/groff_tmac.man, arch/djgpp/README:

1 files changed, 13 insertions, 9 deletions

diff --git a/NEWS b/NEWS
index 8add84d0..e5e1011f 100644
--- a/NEWS
+++ b/NEWS
@@ -23,13 +23,13 @@ Troff
 A new request `nop' (no operation) has been added which is similar to
 `if 1'.  For example,
 
-.if t \{
+.if t \{\
 Hallo!
 .\}
 
 can now be written as
 
-.if t \{
+.if t \{\
 .  nop Hallo!
 .\}
 
@@ -78,20 +78,24 @@ For security reasons the following changes have been done:
     is the default); to enable these requests the `-U' command line flag
     must be used.
 
-  . The files troffrc, troffrc-end, and eqnrc are no longer searched in the
-    current directory (besides the usual tmac path).  Instead, the home
-    directory is used.  While scanning these files, the same secure macro
-    path is active.
+  . Files specified with the .mso request or given with the `-m' command
+    line option, hyphenation patterns loaded with `.hpf', and the start-up
+    files troff-rc and troffrc-end (resp. eqnrc for eqn) are no longer
+    searched in the current directory by default (besides the usual tmac
+    path).  Instead, the home directory is used.  To add the current
+    directory, either use the `-U' or `-M' command line option or set the
+    GROFF_TMAC_PATH environment variable to an appropriate value.
 
-  . Similarly, the current directory is no longer part of the font path; it
-    has been replaced with the home directory.
+  . Similarly, the current directory is no longer part of the font path.
+    Use the `-F' command line option or the GROFF_FONT_PATH environment
+    variable if you really need the current directory.
 
 groff will now install its data files into /usr/local/share/groff/<version>
 by default, following the GNU standard.  Additionally, a local tmac
 directory (by default /usr/local/share/groff/site-tmac) will be scanned
 before the standard tmac directory.  Wrapper files for system-specific macro
 packages (if necessary) are put into /usr/local/lib/groff/site-tmac; this
-directory will be searched after the local tmac directory.
+directory will be searched before the local tmac directory.
 
 All programs now have option `-v' to show the version number; they will exit
 immediately afterwards, following the GNU standards.