From fce6bd379ca3b712a640b720ef0b551511cfe914 Mon Sep 17 00:00:00 2001 From: Karl Berry Date: Sun, 22 Apr 2007 18:45:29 +0000 Subject: -Rr doc from Frank git-svn-id: svn://tug.org/texlive/trunk@4177 c570f23f-e606-0410-a88d-b1316a301751 --- Build/source/texk/dvipsk/dvips.1 | 25 +++++++++++++++---------- Master/texmf/dvips/config/config.ps | 7 +++++-- 2 files changed, 20 insertions(+), 12 deletions(-) diff --git a/Build/source/texk/dvipsk/dvips.1 b/Build/source/texk/dvipsk/dvips.1 index f95a933a95a..09170168cd8 100644 --- a/Build/source/texk/dvipsk/dvips.1 +++ b/Build/source/texk/dvipsk/dvips.1 @@ -360,16 +360,21 @@ nothing but errors to standard error. .B -r Stack pages in reverse order. Normally, page 1 will be printed first. .TP -.B -R -Run in secure mode. This means that ``backtick'' commands from a -.I \especial{} -or -.I \epsffile{} -macro in the (La)TeX source like -.I \especial{psfile="`zcat foo.ps.Z"} -or -.I \epsffile[72 72 540 720]{"`zcat screendump.ps.gz"} -are not executed. +.B -R[0|1|2] +Run securely. +.BR -R2 +disables both shell command execution in +.I \especial'{} +(via backticks +.BR ` +) and config files (via the +.I E +option), and opening of any absolute filenames. +.BR -R1 +, the default, forbids shell escapes but allows absolute filenames. +.BR -R0 +allows both. The config file option is +.I z .TP .B -s Causes the entire global output to be enclosed in a save/restore pair. diff --git a/Master/texmf/dvips/config/config.ps b/Master/texmf/dvips/config/config.ps index 8bdfb06d636..d3d165e851b 100644 --- a/Master/texmf/dvips/config/config.ps +++ b/Master/texmf/dvips/config/config.ps @@ -7,8 +7,11 @@ % to determine this number. (It will be the only thing printed.) m 3500000 -% z1 is "secure", i.e., inhibits execution of `shell commands` in -% \specials. Dvips allows this by default. +% Run securely. z2 disables both shell command execution in +% `\special' and config files (via the `E' option) and opening of any +% absolute filenames. z1, the default, forbids shell escapes but +% allows absolute filenames. z0 allows both. The corresponding +% commandline options are -R0|-R1|-R2 z1 % How to print, maybe with lp instead lpr, etc. If commented-out, output -- cgit v1.2.3