Re: [Lynx-dev] forbid local file browsing?

[Craig Skinner]

On Sat, Jan 06, 2007 at 05:02:12PM -0500, Thomas Dickey wrote:
> >
> >How do I go about forbiding lynx browsing the local file system?
> 
> You should be able to do that using the -restrictions option, e.g.
> 
>       lynx -restrictions=dired_support

Thanks for the suggestion, but no change here.

I tried it as an alias, and also as an argument, but could still browse
/etc:

$ lynx -restrictions=dired_support /etc

Here is the OS's stock /etc/lynx.cfg (I've addd the proxy lines):
$ fgrep -v \# /etc/lynx.cfg | grep -v ^$
.h1 Auxiliary Facilities
.h2 INCLUDE
.ex
.ex
.h2 STARTFILE
STARTFILE:http://www.OpenBSD.org/
.ex
.h2 HELPFILE
HELPFILE:file://localhost/usr/share/doc/html/lynx_help/lynx_help_main.html
.ex
.h2 DEFAULT_INDEX_FILE
DEFAULT_INDEX_FILE:http://www.ncsa.uiuc.edu/SDG/Software/Mosaic/MetaIndex.html
.h1 Interaction
.h2 GOTOBUFFER
.h2 JUMP_PROMPT
.h1 Auxiliary Facilities
.h2 JUMPFILE
.ex
.h2 JUMPBUFFER
.h1 Internal Behavior
.h2 SAVE_SPACE
.h2 REUSE_TEMPFILES
.h2 LYNX_HOST_NAME
.h2 LOCALHOST_ALIAS
.ex 2
.h2 LOCAL_DOMAIN
.h1 Character sets
.h2 CHARACTER_SET
.nf
.fi
.h2 LOCALE_CHARSET
.h2 ASSUME_CHARSET
.h2 ASSUMED_DOC_CHARSET_CHOICE
.h2 DISPLAY_CHARSET_CHOICE
.ex
.ex 4
.h2 ASSUME_LOCAL_CHARSET
.h2 PREPEND_CHARSET_TO_SOURCE
.h2 NCR_IN_BOOKMARKS
.h2 FORCE_8BIT_TOUPPER
.h2 OUTGOING_MAIL_CHARSET
.h2 ASSUME_UNREC_CHARSET
.h2 PREFERRED_LANGUAGE
.h2 PREFERRED_CHARSET
.h2 CHARSETS_DIRECTORY
.h2 CHARSET_SWITCH_RULES
.h1 Interaction
.h2 URL_DOMAIN_PREFIXES
.h2 URL_DOMAIN_SUFFIXES
.h2 FORMS_OPTIONS
.h2 PARTIAL
.h2 PARTIAL_THRES
.h2 SHOW_KB_RATE
.h2 SHOW_KB_NAME
.h1 Timeouts
.h2 INFOSECS
.h2 MESSAGESECS
.h2 ALERTSECS
.h2 DEBUGSECS
.h2 REPLAYSECS
.h1 Appearance
.h2 USE_SELECT_POPUPS
.h2 SHOW_CURSOR
.h2 UNDERLINE_LINKS
.h2 BOLD_HEADERS
.h2 BOLD_H1
.h2 BOLD_NAME_ANCHORS
.h1 Internal Behavior
.h2 DEFAULT_CACHE_SIZE
.h2 DEFAULT_VIRTUAL_MEMORY_SIZE
.h2 SOURCE_CACHE
.h2 SOURCE_CACHE_FOR_ABORTED
.h2 ALWAYS_RESUBMIT_POSTS
.h2 TRIM_INPUT_FIELDS
.h1 HTML Parsing
.h2 NO_ISMAP_IF_USEMAP
.h2 SEEK_FRAG_MAP_IN_CUR
.h2 SEEK_FRAG_AREA_IN_CUR
.h1 CGI scripts
.h2 LOCAL_EXECUTION_LINKS_ALWAYS_ON
.h2 LOCAL_EXECUTION_LINKS_ON_BUT_NOT_REMOTE
.h2 TRUSTED_EXEC
.h2 ALWAYS_TRUSTED_EXEC
.h2 TRUSTED_LYNXCGI
.h2 LYNXCGI_ENVIRONMENT
.h2 LYNXCGI_DOCUMENT_ROOT
.h1 Cookies
.h2 FORCE_SSL_COOKIES_SECURE
.h1 Internal Behavior
.h2 MAIL_SYSTEM_ERROR_LOGGING
.h2 CHECKMAIL
.h1 News-groups
.h2 NNTPSERVER
.h2 LIST_NEWS_NUMBERS
.h2 LIST_NEWS_DATES
.h2 NEWS_CHUNK_SIZE
.h2 NEWS_MAX_CHUNK
.h2 NEWS_POSTING
.h2 LYNX_SIG_FILE
.h1 Bibliographic Protocol (bibp scheme)
.h2 BIBP_GLOBAL_SERVER
.h2 BIBP_BIBHOST
.h1 Interaction
.h2 SCROLLBAR
.h2 SCROLLBAR_ARROW
.h2 USE_MOUSE
.h1 HTML Parsing
.h2 COLLAPSE_BR_TAGS
.h2 TAGSOUP
.h1 Cookies
.h2 SET_COOKIES
.h2 ACCEPT_ALL_COOKIES
.h2 COOKIE_ACCEPT_DOMAINS
.h2 COOKIE_REJECT_DOMAINS
.h2 COOKIE_LOOSE_INVALID_DOMAINS
.h2 COOKIE_STRICT_INVALID_DOMAINS
.h2 COOKIE_QUERY_INVALID_DOMAINS
.h2 PERSISTENT_COOKIES
.h2 COOKIE_FILE
.h2 COOKIE_SAVE_FILE
.h1 Mail-related
.h2 SYSTEM_MAIL
.h2 SYSTEM_MAIL_FLAGS
.ex 2
.ex 2
.ex 2
.ex 2
.ex 2
.h2 MAIL_ADRS
.h2 USE_FIXED_RECORDS
.h1 Keyboard Input
.h2 VI_KEYS_ALWAYS_ON
.h2 EMACS_KEYS_ALWAYS_ON
.h2 DEFAULT_KEYPAD_MODE
.h2 NUMBER_LINKS_ON_LEFT
.h2 NUMBER_FIELDS_ON_LEFT
.h2 DEFAULT_KEYPAD_MODE_IS_NUMBERS_AS_ARROWS
.h2 CASE_SENSITIVE_ALWAYS_ON
.h1 Auxiliary Facilities
.h2 DEFAULT_BOOKMARK_FILE
.h2 MULTI_BOOKMARK_SUPPORT
.h2 BLOCK_MULTI_BOOKMARKS
.h1 Interaction
.h2 DEFAULT_USER_MODE
.h1 External Programs
.h2 DEFAULT_EDITOR
.h2 SYSTEM_EDITOR
.h1 Proxy
.h2 HTTP_PROXY
.h2 HTTPS_PROXY
.h2 FTP_PROXY
.h2 GOPHER_PROXY
.h2 NEWSPOST_PROXY
.h2 NEWSREPLY_PROXY
.h2 NEWS_PROXY
.h2 NNTP_PROXY
.h2 SNEWSPOST_PROXY
.h2 SNEWSREPLY_PROXY
.h2 SNEWS_PROXY
.h2 WAIS_PROXY
.h2 FINGER_PROXY
.h2 CSO_PROXY
.ex 15
http_proxy:http://localhost:3128/
https_proxy:http://localhost:3128/
ftp_proxy:http://localhost:3128/
.h2 NO_PROXY
.ex
.ex
.h1 External Programs
.h2 PRINTER
.h2 DOWNLOADER
.h2 UPLOADER
.ex 3
.ex
.ex
.ex
.ex
.ex
.ex
.ex
.ex 2
.ex
.h1 Interaction
.h2 NO_DOT_FILES
.h1 Internal Behavior
.h2 NO_FROM_HEADER
.h2 NO_REFERER_HEADER
.h1 Internal Behavior
.h2 NO_FILE_REFERER
.h2 REFERER_WITH_QUERY
.h1 Appearance
.h2 VERBOSE_IMAGES
.h2 MAKE_LINKS_FOR_ALL_IMAGES
.h2 MAKE_PSEUDO_ALTS_FOR_INLINES
.h2 SUBSTITUTE_UNDERSCORES
.h1 Interaction
.h2 QUIT_DEFAULT_YES
.h1 HTML Parsing
.h2 HISTORICAL_COMMENTS
.h2 MINIMAL_COMMENTS
MINIMAL_COMMENTS:TRUE
.h2 SOFT_DQUOTES
.h2 STRIP_DOTDOT_URLS
.h1 Appearance
.h2 ENABLE_SCROLLBACK
.h2 SCAN_FOR_BURIED_NEWS_REFS
.h2 PREPEND_BASE_TO_SOURCE
.h1 External Programs
.h2 GLOBAL_EXTENSION_MAP
.h2 PERSONAL_EXTENSION_MAP
.h2 SUFFIX_ORDER
.h2 SUFFIX
.ex
.ex
.ex
.ex
.ex 29
.h2 XLOADIMAGE_COMMAND
.h2 VIEWER
.ex 7
.h2 GLOBAL_MAILCAP
.h2 PERSONAL_MAILCAP
.h1 Keyboard Input
.h2 KEYBOARD_LAYOUT
.h2 KEYMAP
.nf
.fi
.nf
.fi
.nf
.fi
.nf
.fi
.nf
.fi
.nf
.fi
.nf
.fi
.h1 External Programs
.h2 CSWING_PATH
.h1 Internal Behavior
.h2 AUTO_UNCACHE_DIRLISTS
.h1 Appearance
.h2 LIST_FORMAT
.nf
.fi
.ex
.ex
.ex
.h1 External Programs
.h2 DIRED_MENU
.nf
.fi
.h1 Internal Behavior
.h2 NONRESTARTING_SIGWINCH
.h2 NO_FORCED_CORE_DUMP
.h1 Appearance
.h2 COLOR
.nf
.fi
COLOR:6:brightred:black
.h2 ASSUMED_COLOR
.h1 External Programs
.h2 EXTERNAL
.h1 Internal Behavior
.h2 RULE
.h2 RULESFILE
.ex 5
.h1 Appearance
.h2 PRETTYSRC
.h2 PRETTYSRC_SPEC
.nf
.fi
.ex
.ex
.ex
.h2 HTMLSRC_ATTRNAME_XFORM
.h2 HTMLSRC_TAGNAME_XFORM
.h2 PRETTYSRC_VIEW_NO_ANCHOR_NUMBERING
.h1 HTML Parsing
.h2 FORCE_EMPTY_HREFLESS_A
.h2 HIDDEN_LINK_MARKER
.h1 Appearance
.h2 JUSTIFY
.h2 JUSTIFY_MAX_VOID_PERCENT
.h1 Interaction
.h2 TEXTFIELDS_NEED_ACTIVATION
.h2 LEFTARROW_IN_TEXTFIELD_PROMPT
.h1 Timeouts
.h2 CONNECT_TIMEOUT
.h1 Internal Behavior
.h2 FTP_PASSIVE
.h2 ENABLE_LYNXRC
.nf
.fi
.h1 External Programs
.h1 Interaction
.h2 FORCE_SSL_PROMPT
.h2 FORCE_COOKIE_PROMPT
.h1 Appearance