[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#418788: texlive-base-bin: dvips fails with \includegraphics outside current directory



On Thu, Apr 12, 2007 at 05:40:50PM +0200, Frank Küster wrote:
> Yes, the problem is there in TL 2005.  But it's really just a
> documentation bug.
> 
> First thing is: 
> 
> How to learn which file to look in (it is
> /etc/texmf/[texlive/]dvips/config.ps).  "info dvips" brings you there,
> finally.  If you know for what to search (namely "absolute", not
> "outside"), then it's the third hit.  But maybe Eric can give us a hint
> how he would have found it more easily.

Yes, I even looked at config.ps and saw this :

> % z1 is "secure", i.e., inhibits execution of `shell commands` in
> % \specials.  Dvips allows this by default.
> z1

but it didn't occur to me that absolute pathnames were also
disallowed.  (I ran dvips under "strace" and saw that it wasn't even
trying to open the included file, so I suspected some kind of
configuration issue.)

> But that is not the whole story.  z1 also disables absolute pathnames.
> Furthermore, you've got to know that the alternative is "z0".

Yes, adding this comment in config.ps would have been enough for me
(a section in the man page would be even better).

> It can also be changed on the commandline, here the info manual says:
> 
> ,----
> | `-R'
> |      Run securely.  `-R2' disables both shell command execution in
> |      `\special' (via ``', *note Dynamic creation of graphics::) and
> |      config files (via the `E' option, *note Configuration file
> |      commands::) and opening of any absolute filenames.  `-R1', the
> |      default, forbids shell escapes but allows absolute filenames.
> |      `-R0' allows both.
> `----

Not in TL 2005, though.  It just says
`-R'
     Run securely.  This disables shell command execution in `\special'
     (via ``', *note Dynamic creation of graphics::) and config files
     (via the `E' option, *note Configuration file commands::), and
     opening of any absolute filenames.

Hmmm, I just tried it, and it accepts -R0 and allows the absolute path.

So just to be clear, in TL 2005 there's no way to get the "-R1" behavior
(absolute pathnames permitted, shell escapes forbidden)?  I can live
with that until TL 2007 hits testing.

Thanks for your help, and for all the great TeX packaging.

-- 
Eric Cooper             e c c @ c m u . e d u



Reply to: