Replace tmac.safer with a real secure solution.

* src/roff/troff/input.cc (open_request, opena_request, pipe_source,
system_request, pipe_output): Disable requests if in safer mode.
* src/roff/groff/groff.cc (main): Remove reference to tmac.safer.
* tmac/tmac.safer, tmac/groff_msafer.man: Removed.
* tmac/Makefile.sub, NEWS, man/roff.man, tmac/groff_tmac.man,
doc/groff.texinfo, src/roff/groff/groff.man,
src/roff/troff/troff.man, arch/djgpp/README: Updated.

1 files changed, 6 insertions, 5 deletions

diff --git a/doc/groff.texinfo b/doc/groff.texinfo
index 3cc259d2..9b13cfb8 100644
--- a/doc/groff.texinfo
+++ b/doc/groff.texinfo
@@ -1178,8 +1178,9 @@ Don't allow newlines with @code{eqn} delimiters.  This is the same as
 the @option{-N} option in @code{geqn}.
 
 @item -S
-Safer mode.  Pass the @option{-S} option to @code{gpic} and use the
-@option{-msafer} macros with @code{gtroff} (enabled by default).
+Safer mode.  Pass the @option{-S} option to @code{gpic} and disable the
+@code{open}, @code{opena}, @code{pso}, @code{sy}, and @code{pi} requests.
+For security reasons, this is enabled by default.
 
 @item -U
 Unsafe mode.  Reverts to the old unsafe behaviour.
@@ -1361,8 +1362,8 @@ device (@samp{ps}).  Note that you can either say @w{@samp{-m me}} or
 @acronym{UNIX}.@footnote{The same is true for the other main macro
 packages that come with @code{groff}: @file{man}, @file{mdoc},
 @file{ms}, @file{mm}, and @file{mandoc}.  This won't work in general;
-for example, to load @file{tmac.safer}, either @samp{-msafer} or
-@w{@samp{-m safer}} must be used.}
+for example, to load @file{tmac.trace}, either @samp{-mtrace} or
+@w{@samp{-m trace}} must be used.}
 
 @example
 groff -man -rD1 -z file
@@ -6332,7 +6333,7 @@ name.
 This would be called as
 
 @example
-.vl $Id: groff.texinfo,v 1.45 2000/10/09 19:41:55 wlemb Exp $
+.vl $Id: groff.texinfo,v 1.46 2000/10/14 14:53:59 wlemb Exp $
 @end example
 
 @xref{Request Arguments}.