Add a "-i" option ("insecure") which disables the checks for

root ownership, etc.  I will soon commit a companion knob for
"/etc/rc.conf".

Submitted by:	Maxime Henrion <mhenrion@cybercable.fr>

1 files changed, 10 insertions, 2 deletions

diff --git a/sbin/ldconfig/ldconfig.8 b/sbin/ldconfig/ldconfig.8
index f008d90..775f5d4 100644
--- a/sbin/ldconfig/ldconfig.8
+++ b/sbin/ldconfig/ldconfig.8
@@ -38,7 +38,7 @@
 .Sh SYNOPSIS
 .Nm ldconfig
 .Op Fl aout | Fl elf
-.Op Fl Rmrsv
+.Op Fl Rimrsv
 .Op Fl f Ar hints_file
 .Op Ar directory | file Ar ...
 .Sh DESCRIPTION
@@ -62,7 +62,8 @@ line.  Blank lines and lines starting with the comment character
 are ignored.
 .Pp
 For security reasons, directories which are world-writable or which
-are not owned by root produce warning messages and are skipped.
+are not owned by root produce warning messages and are skipped, unless
+the -i option is present.
 .Pp
 The shared libraries which are found will be automatically available for loading
 if needed by the program being prepared for execution.
@@ -104,6 +105,8 @@ This is the default action when no parameters are given.
 .It Fl f Ar hints_file
 Read and/or update the specified hints file, instead of the standard file.
 This option is provided primarily for testing.
+.It Fl i
+Run in insecure mode. The security checks will not be performed.
 .It Fl m
 Instead of replacing the contents of the hints file
 with those found in the directories specified,
@@ -186,3 +189,8 @@ A
 .Nm
 utility first appeared in SunOS 4.0, it appeared in its current form
 in FreeBSD 1.1.
+.Sh BUGS
+Some security checks (for example, verifying root ownership of
+added directories) are not performed when
+.Fl aout
+is specified.