Name

NoAbsolute — deny catalogs to read absolute filenames on the system

SYNOPSIS

No | Yes

DESCRIPTION

The directive specifies whether to prevent commands and tags (such as [file]) to read absolute filenames (any files) on the system. In cases where the Interchange daemon has no permission to read the file , this directive — of course — has no influence.

This should be enabled in multiuser environments to minimize security problems.

DIRECTIVE TYPE AND DEFAULT VALUE

Global directive

EXAMPLES

Example: Enabling NoAbsolute

Put the following in interchange.cfg:

NoAbsolute Yes

NOTES

Note that this does not apply to tests for whether a file exists (as one would do with [if file ...] or similar). Such operations are allowed regardless of NoAbsolute.

AVAILABILITY

NoAbsolute is available in Interchange versions:

4.6.0-5.9.0 (git-head)

SOURCE

Interchange 5.9.0:

Source: lib/Vend/Config.pm
Line 497

['NoAbsolute',     'yesno',       'No'],

Source: lib/Vend/Config.pm
Line 5434 (context shows lines 5434-5446)

sub parse_yesno {
my($var, $value) = @_;
$_ = $value;
if (m/^y/i || m/^t/i || m/^1/ || m/^on/i) {
  return 1;
}
elsif (m/^n/i || m/^f/i || m/^0/ || m/^of/i) {
  return 0;
}
else {
  config_error("Use 'yes' or 'no' for the $var directive\n");
}
}

AUTHORS

Interchange Development Group

SEE ALSO

DocBook! Interchange!