For security reasons, don't use the current directory but the home

directory while searching and scanning troffrc and troffrc-end.
Similarly, replace the current directory with the home directory
in the font path.

* Makefile.in (fontpath, tmacpath): Remove current directory.

* src/libs/libgroff/searchpath.cc (search_path::search_path): Add
two parameters `add_home' and `add_current'.
(search_path::~search_path, search_path::command_line_dir,
search_path::open_file): Remove tests for `dirs' being zero.
* src/include/searchpath.h: Adjust.
* src/libs/libgroff/macropath.cc, src/include/macropath.h: Add
`safer_macro_path'.
* src/libs/libgroff/fontfile.cc: Adjust `font_path'.

* src/roff/troff/troff.h: Add `searchpath.h' and `mac_path'.
* src/roff/troff/input.cc: Use `mac_path', initialized with
`macro_path'.
(process_startup_file): Set `mac_path' to `safer_macro_path'.
* src/roff/troff/env.cc: Use `mac_path'.

* src/preproc/eqn/main.cc (main): Use `safer_macro_path'.

* NEWS, man/roff.man, src/roff/troff/troff.man,
src/rof/groff/groff.man, tmac/groff_tmac.man, arch/djgpp/README:
Updated.


* src/include/lib.h: Don't include groff-getopt.h for OSF/1.

* aclocal.m4 (GROFF_SYS_ERRLIST): Do test in C, not in C++.
* configure.in: Fix typo in comment.
* configure: Regenerated.

* src/libgroff/*, src/include/*, src/roff/troff/*: Fixing copyright
dates.

1 files changed, 12 insertions, 4 deletions

diff --git a/NEWS b/NEWS
index 4335f59e..343843f5 100644
--- a/NEWS
+++ b/NEWS
@@ -58,10 +58,18 @@ Miscellaneous
 
 For security reasons the following changes have been done:
 
-  . The tmac.safer file has been replaced with a built-in solution;
-    .open, .opena, .pso, .sy, and .pi are completely disabled in
-    safer mode (which is the default); to enable these requests the `-U'
-    command line flag must be used.
+  . The tmac.safer file has been replaced with a built-in solution; .open,
+    .opena, .pso, .sy, and .pi are completely disabled in safer mode (which
+    is the default); to enable these requests the `-U' command line flag
+    must be used.
+
+  . The files troffrc, troffrc-end, and eqnrc are no longer searched in the
+    current directory (besides the usual tmac path).  Instead, the home
+    directory is used.  While scanning these files, the same secure macro
+    path is active.
+
+  . Similarly, the current directory is no longer part of the font path; it
+    has been replaced with the home directory.
 
 groff will now install its data files into /usr/local/share/groff/<version>
 by default, following the GNU standard.  Additionally, a local tmac