summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2007-04-22 18:45:29 +0000
committerKarl Berry <karl@freefriends.org>2007-04-22 18:45:29 +0000
commitfce6bd379ca3b712a640b720ef0b551511cfe914 (patch)
tree72c5e41f1c7586b26ad125838bd8dc1d2d3bd3d6
parent8fcfac977e10f5e5d3ce8a74fd0505b4e62f56aa (diff)
-Rr doc from Frank
git-svn-id: svn://tug.org/texlive/trunk@4177 c570f23f-e606-0410-a88d-b1316a301751
-rw-r--r--Build/source/texk/dvipsk/dvips.125
-rw-r--r--Master/texmf/dvips/config/config.ps7
2 files changed, 20 insertions, 12 deletions
diff --git a/Build/source/texk/dvipsk/dvips.1 b/Build/source/texk/dvipsk/dvips.1
index f95a933a95a..09170168cd8 100644
--- a/Build/source/texk/dvipsk/dvips.1
+++ b/Build/source/texk/dvipsk/dvips.1
@@ -360,16 +360,21 @@ nothing but errors to standard error.
.B -r
Stack pages in reverse order. Normally, page 1 will be printed first.
.TP
-.B -R
-Run in secure mode. This means that ``backtick'' commands from a
-.I \especial{}
-or
-.I \epsffile{}
-macro in the (La)TeX source like
-.I \especial{psfile="`zcat foo.ps.Z"}
-or
-.I \epsffile[72 72 540 720]{"`zcat screendump.ps.gz"}
-are not executed.
+.B -R[0|1|2]
+Run securely.
+.BR -R2
+disables both shell command execution in
+.I \especial'{}
+(via backticks
+.BR `
+) and config files (via the
+.I E
+option), and opening of any absolute filenames.
+.BR -R1
+, the default, forbids shell escapes but allows absolute filenames.
+.BR -R0
+allows both. The config file option is
+.I z
.TP
.B -s
Causes the entire global output to be enclosed in a save/restore pair.
diff --git a/Master/texmf/dvips/config/config.ps b/Master/texmf/dvips/config/config.ps
index 8bdfb06d636..d3d165e851b 100644
--- a/Master/texmf/dvips/config/config.ps
+++ b/Master/texmf/dvips/config/config.ps
@@ -7,8 +7,11 @@
% to determine this number. (It will be the only thing printed.)
m 3500000
-% z1 is "secure", i.e., inhibits execution of `shell commands` in
-% \specials. Dvips allows this by default.
+% Run securely. z2 disables both shell command execution in
+% `\special' and config files (via the `E' option) and opening of any
+% absolute filenames. z1, the default, forbids shell escapes but
+% allows absolute filenames. z0 allows both. The corresponding
+% commandline options are -R0|-R1|-R2
z1
% How to print, maybe with lp instead lpr, etc. If commented-out, output