ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/rxvt-unicode/doc/rxvt.7.man.in
(Generate patch)

Comparing rxvt-unicode/doc/rxvt.7.man.in (file contents):
Revision 1.48 by root, Mon Jan 16 15:12:48 2006 UTC vs.
Revision 1.49 by root, Tue Jan 17 16:22:41 2006 UTC

… …
127.\} 127.\}
128.rm #[ #] #H #V #F C 128.rm #[ #] #H #V #F C
129.\" ======================================================================== 129.\" ========================================================================
130.\" 130.\"
131.IX Title "rxvt 7" 131.IX Title "rxvt 7"
132.TH rxvt 7 "2006-01-16" "7.0" "RXVT-UNICODE" 132.TH rxvt 7 "2006-01-17" "7.1" "RXVT-UNICODE"
133.SH "NAME" 133.SH "NAME"
134RXVT REFERENCE \- FAQ, command sequences and other background information 134RXVT REFERENCE \- FAQ, command sequences and other background information
135.SH "SYNOPSIS" 135.SH "SYNOPSIS"
136.IX Header "SYNOPSIS" 136.IX Header "SYNOPSIS"
137.Vb 2 137.Vb 2
… …
332one with \f(CW\*(C`\-\-disable\-everything\*(C'\fR (very useful) and a maximal one with 332one with \f(CW\*(C`\-\-disable\-everything\*(C'\fR (very useful) and a maximal one with
333\&\f(CW\*(C`\-\-enable\-everything\*(C'\fR (less useful, it will be very big due to a lot of 333\&\f(CW\*(C`\-\-enable\-everything\*(C'\fR (less useful, it will be very big due to a lot of
334encodings built-in that increase download times and are rarely used). 334encodings built-in that increase download times and are rarely used).
335.IP "I need to make it setuid/setgid to support utmp/ptys on my \s-1OS\s0, is this safe?" 4 335.IP "I need to make it setuid/setgid to support utmp/ptys on my \s-1OS\s0, is this safe?" 4
336.IX Item "I need to make it setuid/setgid to support utmp/ptys on my OS, is this safe?" 336.IX Item "I need to make it setuid/setgid to support utmp/ptys on my OS, is this safe?"
337Likely not. While I honestly try to make it secure, and am probably not 337It should be, starting with release 7.1. You are encouraged to properly
338bad at it, I think it is simply unreasonable to expect all of freetype 338install urxvt with privileges necessary for your \s-1OS\s0 now.
339+ fontconfig + xft + xlib + perl + ... + rxvt-unicode itself to all be
340secure. Also, rxvt-unicode disables some options when it detects that it
341runs setuid or setgid, which is not nice. Besides, with the embedded perl
342interpreter the possibility for security problems easily multiplies.
343.Sp 339.Sp
344Elevated privileges are only required for utmp and pty operations on some 340When rxvt-unicode detects that it runs setuid or setgid, it will fork
345systems (for example, GNU/Linux doesn't need any extra privileges for 341into a helper process for privileged operations (pty handling on some
346ptys, but some need it for utmp support). It is planned to mvoe this into 342systems, utmp/wtmp/lastlog handling on others) and drop privileges
347a forked handler process, but this is not yet done. 343immediately. This is much safer than most other terminals that keep
344privileges while running (but is more relevant to urxvt, as it contains
345things as perl interpreters, which might be \*(L"helpful\*(R" to attackers).
348.Sp 346.Sp
349So, while setuid/setgid operation is supported and not a problem on your 347This forking is done as the very first within \fImain()\fR, which is very early
350typical single-user-no-other-logins unix desktop, always remember that 348and reduces possible bugs to initialisation code run before \fImain()\fR, or
351its an awful lot of code, most of which isn't checked for security issues 349things like the dynamic loader of your system, which should result in very
352regularly. 350little risk.
353.IP "When I log-in to another system it tells me about missing terminfo data?" 4 351.IP "When I log-in to another system it tells me about missing terminfo data?" 4
354.IX Item "When I log-in to another system it tells me about missing terminfo data?" 352.IX Item "When I log-in to another system it tells me about missing terminfo data?"
355The terminal description used by rxvt-unicode is not as widely available 353The terminal description used by rxvt-unicode is not as widely available
356as that for xterm, or even rxvt (for which the same problem often arises). 354as that for xterm, or even rxvt (for which the same problem often arises).
357.Sp 355.Sp
… …
2127.IP "\-\-enable\-plain\-scroll (default: on)" 4 2125.IP "\-\-enable\-plain\-scroll (default: on)" 4
2128.IX Item "--enable-plain-scroll (default: on)" 2126.IX Item "--enable-plain-scroll (default: on)"
2129Add support for a very unobtrusive, plain-looking scrollbar that 2127Add support for a very unobtrusive, plain-looking scrollbar that
2130is the favourite of the rxvt-unicode author, having used it for 2128is the favourite of the rxvt-unicode author, having used it for
2131many years. 2129many years.
2132.IP "\-\-enable\-half\-shadow (default: off)" 4
2133.IX Item "--enable-half-shadow (default: off)"
2134Make shadows on the scrollbar only half the normal width & height.
2135only applicable to rxvt scrollbars.
2136.IP "\-\-enable\-ttygid (default: off)" 4 2130.IP "\-\-enable\-ttygid (default: off)" 4
2137.IX Item "--enable-ttygid (default: off)" 2131.IX Item "--enable-ttygid (default: off)"
2138Change tty device setting to group \*(L"tty\*(R" \- only use this if 2132Change tty device setting to group \*(L"tty\*(R" \- only use this if
2139your system uses this type of security. 2133your system uses this type of security.
2140.IP "\-\-disable\-backspace\-key" 4 2134.IP "\-\-disable\-backspace\-key" 4

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines