diff options
author | Karl Berry <karl@freefriends.org> | 2007-04-22 18:45:29 +0000 |
---|---|---|
committer | Karl Berry <karl@freefriends.org> | 2007-04-22 18:45:29 +0000 |
commit | fce6bd379ca3b712a640b720ef0b551511cfe914 (patch) | |
tree | 72c5e41f1c7586b26ad125838bd8dc1d2d3bd3d6 | |
parent | 8fcfac977e10f5e5d3ce8a74fd0505b4e62f56aa (diff) |
-Rr doc from Frank
git-svn-id: svn://tug.org/texlive/trunk@4177 c570f23f-e606-0410-a88d-b1316a301751
-rw-r--r-- | Build/source/texk/dvipsk/dvips.1 | 25 | ||||
-rw-r--r-- | Master/texmf/dvips/config/config.ps | 7 |
2 files changed, 20 insertions, 12 deletions
diff --git a/Build/source/texk/dvipsk/dvips.1 b/Build/source/texk/dvipsk/dvips.1 index f95a933a95a..09170168cd8 100644 --- a/Build/source/texk/dvipsk/dvips.1 +++ b/Build/source/texk/dvipsk/dvips.1 @@ -360,16 +360,21 @@ nothing but errors to standard error. .B -r Stack pages in reverse order. Normally, page 1 will be printed first. .TP -.B -R -Run in secure mode. This means that ``backtick'' commands from a -.I \especial{} -or -.I \epsffile{} -macro in the (La)TeX source like -.I \especial{psfile="`zcat foo.ps.Z"} -or -.I \epsffile[72 72 540 720]{"`zcat screendump.ps.gz"} -are not executed. +.B -R[0|1|2] +Run securely. +.BR -R2 +disables both shell command execution in +.I \especial'{} +(via backticks +.BR ` +) and config files (via the +.I E +option), and opening of any absolute filenames. +.BR -R1 +, the default, forbids shell escapes but allows absolute filenames. +.BR -R0 +allows both. The config file option is +.I z .TP .B -s Causes the entire global output to be enclosed in a save/restore pair. diff --git a/Master/texmf/dvips/config/config.ps b/Master/texmf/dvips/config/config.ps index 8bdfb06d636..d3d165e851b 100644 --- a/Master/texmf/dvips/config/config.ps +++ b/Master/texmf/dvips/config/config.ps @@ -7,8 +7,11 @@ % to determine this number. (It will be the only thing printed.) m 3500000 -% z1 is "secure", i.e., inhibits execution of `shell commands` in -% \specials. Dvips allows this by default. +% Run securely. z2 disables both shell command execution in +% `\special' and config files (via the `E' option) and opening of any +% absolute filenames. z1, the default, forbids shell escapes but +% allows absolute filenames. z0 allows both. The corresponding +% commandline options are -R0|-R1|-R2 z1 % How to print, maybe with lp instead lpr, etc. If commented-out, output |