… | |
… | |
148 | |
148 | |
149 | I need to make it setuid/setgid to support utmp/ptys on my OS, is this |
149 | I need to make it setuid/setgid to support utmp/ptys on my OS, is this |
150 | safe? |
150 | safe? |
151 | Likely not. While I honestly try to make it secure, and am probably |
151 | Likely not. While I honestly try to make it secure, and am probably |
152 | not bad at it, I think it is simply unreasonable to expect all of |
152 | not bad at it, I think it is simply unreasonable to expect all of |
153 | freetype + fontconfig + xft + xlib + ... + rxvt-unicode itself to |
153 | freetype + fontconfig + xft + xlib + perl + ... + rxvt-unicode |
154 | all be secure. Also, rxvt-unicode disables some options when it |
154 | itself to all be secure. Also, rxvt-unicode disables some options |
155 | detects that it runs setuid or setgid, which is not nice. |
155 | when it detects that it runs setuid or setgid, which is not nice. |
|
|
156 | Besides, with the embedded perl interpreter the possibility for |
|
|
157 | security problems easily multiplies. |
156 | |
158 | |
157 | Elevated privileges are only required for utmp and pty operations on |
159 | Elevated privileges are only required for utmp and pty operations on |
158 | some systems (for example, GNU/Linux doesn't need any extra |
160 | some systems (for example, GNU/Linux doesn't need any extra |
159 | privileges for ptys, but some need it for utmp support). If |
161 | privileges for ptys, but some need it for utmp support). It is |
160 | rxvt-unicode doesn't support the library/setuid helper that your OS |
162 | planned to mvoe this into a forked handler process, but this is not |
161 | needs I'll be happy to assist you in implementing support for it. |
163 | yet done. |
162 | |
164 | |
163 | So, while setuid/setgid operation is supported and not a problem on |
165 | So, while setuid/setgid operation is supported and not a problem on |
164 | your typical single-user-no-other-logins unix desktop, always |
166 | your typical single-user-no-other-logins unix desktop, always |
165 | remember that its an awful lot of code, most of which isn't checked |
167 | remember that its an awful lot of code, most of which isn't checked |
166 | for security issues regularly. |
168 | for security issues regularly. |
… | |
… | |
1307 | Ps = 10 Change colour of text foreground to Pt (NB: may change in future) |
1309 | Ps = 10 Change colour of text foreground to Pt (NB: may change in future) |
1308 | Ps = 11 Change colour of text background to Pt (NB: may change in future) |
1310 | Ps = 11 Change colour of text background to Pt (NB: may change in future) |
1309 | Ps = 12 Change colour of text cursor foreground to Pt |
1311 | Ps = 12 Change colour of text cursor foreground to Pt |
1310 | Ps = 13 Change colour of mouse foreground to Pt |
1312 | Ps = 13 Change colour of mouse foreground to Pt |
1311 | Ps = 17 Change colour of highlight characters to Pt |
1313 | Ps = 17 Change colour of highlight characters to Pt |
1312 | Ps = 18 Change colour of bold characters to Pt |
1314 | Ps = 18 Change colour of bold characters to Pt [deprecated, see 706] |
1313 | Ps = 19 Change colour of underlined characters to Pt |
1315 | Ps = 19 Change colour of underlined characters to Pt [deprecated, see 707] |
1314 | Ps = 20 Change default background to Pt |
1316 | Ps = 20 Change default background to Pt |
1315 | Ps = 39 Change default foreground colour to Pt. |
1317 | Ps = 39 Change default foreground colour to Pt. |
1316 | Ps = 46 Change Log File to Pt unimplemented |
1318 | Ps = 46 Change Log File to Pt unimplemented |
1317 | Ps = 49 Change default background colour to Pt. |
1319 | Ps = 49 Change default background colour to Pt. |
1318 | Ps = 50 Set fontset to Pt, with the following special values of Pt (rxvt) #+n change up n #-n change down n if n is missing of 0, a value of 1 is used empty change to font0 n change to font n |
1320 | Ps = 50 Set fontset to Pt, with the following special values of Pt (rxvt) #+n change up n #-n change down n if n is missing of 0, a value of 1 is used empty change to font0 n change to font n |
1319 | Ps = 55 Log all scrollback buffer and all of screen to Pt |
1321 | Ps = 55 Log all scrollback buffer and all of screen to Pt |
1320 | Ps = 701 Change current locale to Pt, or, if Pt is ?, return the current locale (Compile frills). |
1322 | Ps = 701 Change current locale to Pt, or, if Pt is ?, return the current locale (Compile frills). |
1321 | Ps = 703 Menubar command Pt (Compile menubar). |
1323 | Ps = 703 Menubar command Pt (Compile menubar). |
1322 | Ps = 704 Change colour of italic characters to Pt |
1324 | Ps = 704 Change colour of italic characters to Pt |
1323 | Ps = 705 Change background pixmap tint colour to Pt (Compile transparency). |
1325 | Ps = 705 Change background pixmap tint colour to Pt (Compile transparency). |
|
|
1326 | Ps = 706 Change colour of bold characters to Pt |
|
|
1327 | Ps = 707 Change colour of underlined characters to Pt |
1324 | Ps = 710 Set normal fontset to Pt. Same as Ps = 50. |
1328 | Ps = 710 Set normal fontset to Pt. Same as Ps = 50. |
1325 | Ps = 711 Set bold fontset to Pt. Similar to Ps = 50 (Compile styles). |
1329 | Ps = 711 Set bold fontset to Pt. Similar to Ps = 50 (Compile styles). |
1326 | Ps = 712 Set italic fontset to Pt. Similar to Ps = 50 (Compile styles). |
1330 | Ps = 712 Set italic fontset to Pt. Similar to Ps = 50 (Compile styles). |
1327 | Ps = 713 Set bold-italic fontset to Pt. Similar to Ps = 50 (Compile styles). |
1331 | Ps = 713 Set bold-italic fontset to Pt. Similar to Ps = 50 (Compile styles). |
1328 | Ps = 720 Move viewing window up by Pt lines, or clear scrollback buffer if Pt = 0 (Compile frills). |
1332 | Ps = 720 Move viewing window up by Pt lines, or clear scrollback buffer if Pt = 0 (Compile frills). |
… | |
… | |
1959 | it. |
1963 | it. |
1960 | |
1964 | |
1961 | --disable-resources |
1965 | --disable-resources |
1962 | Removes any support for resource checking. |
1966 | Removes any support for resource checking. |
1963 | |
1967 | |
1964 | --enable-xgetdefault |
|
|
1965 | Make resources checking via XGetDefault() instead of our small |
|
|
1966 | version which only checks ~/.Xdefaults, or if that doesn't exist |
|
|
1967 | then ~/.Xresources. |
|
|
1968 | |
|
|
1969 | Please note that nowadays, things like XIM will automatically pull |
|
|
1970 | in and use the full X resource manager, so the overhead of using it |
|
|
1971 | might be very small, if nonexistant. |
|
|
1972 | |
|
|
1973 | --enable-strings (default: off) |
1968 | --enable-strings (default: off) |
1974 | Add support for our possibly faster memset() function and other |
1969 | Add support for our possibly faster memset() function and other |
1975 | various routines, overriding your system's versions which may have |
1970 | various routines, overriding your system's versions which may have |
1976 | been hand-crafted in assembly or may require extra libraries to link |
1971 | been hand-crafted in assembly or may require extra libraries to link |
1977 | in. (this breaks ANSI-C rules and has problems on many GNU/Linux |
1972 | in. (this breaks ANSI-C rules and has problems on many GNU/Linux |