[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#51586: Please Reopen 51586 ("secure" mode in dvips should be the default)



From: Denis
Subject: Re:
Date: Mon,

> > Then I tried to make patch.  It is easy to make '-R' as default
> > but I think it needs a bit more.
> > 
> > - '-R' option is already used by magicfilter and perhaps there are
> >   some who set this personally so '-R' option should be retained as
> >   it is now.
> > 
> > - So there must be new option which enables the feature that dvips
> >   can execute shell commands through \special.
> >   I added '-I' option (I mean 'I'nsecure mode)
> > 
> > - Documents should reflect these changes.
> > 
> > I would like to hear any comments or suggestions.
> 
> But how do you run dvips in secure mode by default?

Well, please read my previous mail then you find the patch
(multipart mail) and it contains 

--- tetex-bin-1.0.6.orig/texk/dvipsk/dvips.c
+++ tetex-bin-1.0.6/texk/dvipsk/dvips.c
@@ -64,7 +64,7 @@
 Boolean cropmarks ;           /* add cropmarks? */
 Boolean abspage = 0 ;         /* are page numbers absolute? */
 Boolean tryepsf = 0 ;         /* should we try to make it espf? */
-Boolean secure = 0 ;          /* make safe for suid */
+Boolean secure = 1 ;          /* make safe for suid */
 int collatedcopies = 1 ;      /* how many collated copies? */

okay? "Boolean secure = 1" will make dvips run in secure mode
by default.  (But I forgot to say the patch was attached)

About '-R' option I only said that it was needed to remain
for consistency.

> I did not look into dvips, but IMO a better solution is to add an option
> in the config file, not on command line (maybe a `R' without argument is
> a good candidate).

Please read this thread carefully ;-)  I just received the mail

From: Julian Gilbey <J.D.Gilbey@qmw.ac.uk>
Subject: Bug#51586: Please Reopen 51586 ("secure" mode in dvips should be the default)
Date: Mon, 22 May 2000 14:01:51 +0100

> The info file is incorrect and should be corrected.  The -R (secure
> mode) command line option is not settable from a config file.

so config file would not help us.

Please look through the patch attached to my previous mail
or better please try the patch if it works.

Regards,			2000.5.23

--
 Debian JP Developer - much more I18N of Debian
 Atsuhito Kohda <kohda@pm.tokushima-u.ac.jp>
 Department of Math., Tokushima Univ.



Reply to: