On Sat, Aug 04, 2018 at 11:11:28PM +0100, Jason McIntyre wrote: > On Sat, Aug 04, 2018 at 04:05:44PM -0500, Kris Katterjohn wrote: > > On Sat, Aug 04, 2018 at 09:05:36PM +0100, Jason McIntyre wrote: > > > fair enough. could you submit an updated diff, please? > > > > Sure. New diff below. > > > > I used the same style that appears in the description of the restricted > > shell in the ksh man page. > > > > Cheers, > > Kris Katterjohn > > > > hi. i think this is better. i'd be tempted to remove "i.e.\&" from the > diff too, but that's academic. > > i'll commit it tomorrow if no one has objected. >
diff below is what i finally committed. thanks for the mail. jmc Index: cu.1 =================================================================== RCS file: /cvs/src/usr.bin/cu/cu.1,v retrieving revision 1.17 diff -u -r1.17 cu.1 --- cu.1 10 Dec 2017 07:34:38 -0000 1.17 +++ cu.1 5 Aug 2018 06:09:26 -0000 @@ -76,7 +76,19 @@ Start .Nm in restricted mode. -This prevents all local filesystem operations and command executions. +This prevents all local filesystem operations +.Po +.Cm ~R , +.Cm ~X , +and +.Cm ~> +.Pc +and command executions +.Po +.Cm ~C +and +.Cm ~$ +.Pc . .It Fl s Ar speed | Fl Ar speed Set the speed of the connection. The default is 9600. @@ -108,7 +120,7 @@ .It Ic ~^D No or Ic ~. Drop the connection and exit. Only the connection is dropped \(en the login session is not terminated. -.It Ic ~\*(Gt +.It Ic ~> Copy file from local to remote. .Nm prompts for the name of a local file to transmit. @@ -119,7 +131,6 @@ The command string sent to the local .Ux system is processed by the shell. -This command is not allowed in restricted mode. .It Ic ~# Send a .Dv BREAK @@ -134,25 +145,20 @@ The child program will be run with the following arrangement of file descriptors: .Bd -literal -offset indent -0 \*(Lt-\*(Gt remote tty in -1 \*(Lt-\*(Gt remote tty out -2 \*(Lt-\*(Gt local tty stderr +0 <-> remote tty in +1 <-> remote tty out +2 <-> local tty stderr .Ed -.Pp -This command is not allowed in restricted mode. .It Ic ~D Deassert the data terminal ready (DTR) line briefly. -This command is not allowed in restricted mode. .It Ic ~R Record all output from the remote system to a file. If the given file already exists, it is appended to. If no file is specified, any existing recording is stopped. -This command is not allowed in restricted mode. .It Ic ~S Change the speed of the connection. .It Ic ~X Send a file with the XMODEM protocol. -This command is not allowed in restricted mode. .It Ic ~? Get a summary of the tilde escapes. .El
