Delete support for the LESSOPEN and LESSCLOSE environment variables
authorguenther <guenther@openbsd.org>
Sun, 14 Apr 2024 18:11:54 +0000 (18:11 +0000)
committerguenther <guenther@openbsd.org>
Sun, 14 Apr 2024 18:11:54 +0000 (18:11 +0000)
commitc74702f8a020c6cfd3ae0dbd2b85bf100802950e
treef05f84179947e43aa99176e509ccdc22d92736cb
parent06a1d8d0309bd17b114dfe01ae51e99a1dc919ef
Delete support for the LESSOPEN and LESSCLOSE environment variables
aka the "Input Preprocessor": it's been a source for multiple
security bugs in the past as everything has to deal with handling
arbitrary filenames and generally resulted in multiple TOCTOU issues.
The base system never included a default LESSOPEN setting like some
Linux distributions did, but it's a suds-filled sink full of knives
to try to use safely.

ok tb@ deraadt@ millert@
usr.bin/less/ch.c
usr.bin/less/command.c
usr.bin/less/edit.c
usr.bin/less/filename.c
usr.bin/less/funcs.h
usr.bin/less/less.1
usr.bin/less/less.h
usr.bin/less/less.hlp
usr.bin/less/main.c
usr.bin/less/opttbl.c