On Sat, Aug 04, 2018 at 09:05:36PM +0100, Jason McIntyre wrote: > fair enough. could you submit an updated diff, please?
Sure. New diff below. I used the same style that appears in the description of the restricted shell in the ksh man page. Cheers, Kris Katterjohn Index: cu.1 =================================================================== RCS file: /cvs/src/usr.bin/cu/cu.1,v retrieving revision 1.17 diff -u -p -r1.17 cu.1 --- cu.1 10 Dec 2017 07:34:38 -0000 1.17 +++ cu.1 4 Aug 2018 21:01:23 -0000 @@ -76,7 +76,15 @@ devices by default. Start .Nm in restricted mode. -This prevents all local filesystem operations and command executions. +This prevents all local filesystem operations (i.e.\& +.Sq Cm ~R , +.Sq Cm ~X +and +.Sq Cm ~> ) +and command executions (i.e.\& +.Sq Cm ~C +and +.Sq Cm ~$ ) . .It Fl s Ar speed | Fl Ar speed Set the speed of the connection. The default is 9600. @@ -119,7 +127,6 @@ process to the remote host. The command string sent to the local .Ux system is processed by the shell. -This command is not allowed in restricted mode. .It Ic ~# Send a .Dv BREAK @@ -139,20 +146,16 @@ file descriptors: 2 \*(Lt-\*(Gt local tty stderr .Ed .Pp -This command is not allowed in restricted mode. .It Ic ~D Deassert the data terminal ready (DTR) line briefly. -This command is not allowed in restricted mode. .It Ic ~R Record all output from the remote system to a file. If the given file already exists, it is appended to. If no file is specified, any existing recording is stopped. -This command is not allowed in restricted mode. .It Ic ~S Change the speed of the connection. .It Ic ~X Send a file with the XMODEM protocol. -This command is not allowed in restricted mode. .It Ic ~? Get a summary of the tilde escapes. .El
