Bug#418788: texlive-base-bin: dvips fails with \includegraphics outside current directory
On Thu, Apr 12, 2007 at 05:40:50PM +0200, Frank Küster wrote:
> Yes, the problem is there in TL 2005. But it's really just a
> documentation bug.
>
> First thing is:
>
> How to learn which file to look in (it is
> /etc/texmf/[texlive/]dvips/config.ps). "info dvips" brings you there,
> finally. If you know for what to search (namely "absolute", not
> "outside"), then it's the third hit. But maybe Eric can give us a hint
> how he would have found it more easily.
Yes, I even looked at config.ps and saw this :
> % z1 is "secure", i.e., inhibits execution of `shell commands` in
> % \specials. Dvips allows this by default.
> z1
but it didn't occur to me that absolute pathnames were also
disallowed. (I ran dvips under "strace" and saw that it wasn't even
trying to open the included file, so I suspected some kind of
configuration issue.)
> But that is not the whole story. z1 also disables absolute pathnames.
> Furthermore, you've got to know that the alternative is "z0".
Yes, adding this comment in config.ps would have been enough for me
(a section in the man page would be even better).
> It can also be changed on the commandline, here the info manual says:
>
> ,----
> | `-R'
> | Run securely. `-R2' disables both shell command execution in
> | `\special' (via ``', *note Dynamic creation of graphics::) and
> | config files (via the `E' option, *note Configuration file
> | commands::) and opening of any absolute filenames. `-R1', the
> | default, forbids shell escapes but allows absolute filenames.
> | `-R0' allows both.
> `----
Not in TL 2005, though. It just says
`-R'
Run securely. This disables shell command execution in `\special'
(via ``', *note Dynamic creation of graphics::) and config files
(via the `E' option, *note Configuration file commands::), and
opening of any absolute filenames.
Hmmm, I just tried it, and it accepts -R0 and allows the absolute path.
So just to be clear, in TL 2005 there's no way to get the "-R1" behavior
(absolute pathnames permitted, shell escapes forbidden)? I can live
with that until TL 2007 hits testing.
Thanks for your help, and for all the great TeX packaging.
--
Eric Cooper e c c @ c m u . e d u
Reply to: