Added documentation for new --chroot option

diff --git a/doc/source/privoxy-man-page.sgml b/doc/source/privoxy-man-page.sgml
index f005693..70defbf 100644 (file)
--- a/doc/source/privoxy-man-page.sgml
+++ b/doc/source/privoxy-man-page.sgml
@@ -5,7 +5,7 @@
                 This file belongs into
                 ijbswa.sourceforge.net:/home/groups/i/ij/ijbswa/htdocs/
                 
- $Id: privoxy-man-page.sgml,v 1.13.2.3 2002/08/26 00:20:18 hal9 Exp $
+ $Id: privoxy-man-page.sgml,v 1.13.2.4 2002/08/26 16:26:58 hal9 Exp $
 
  Copyright (C) 2001, 2002 Privoxy Developers <developers@privoxy.org>
  See LICENSE.
@@ -42,10 +42,10 @@
 <!entity copyright SYSTEM "copyright.sgml">
 <!entity license SYSTEM "license.sgml">
 <!entity authors SYSTEM "p-authors.sgml">
-<!entity p-version "3.0.0">
-<!entity p-status "stable">
-<!entity % p-not-stable "IGNORE">
-<!entity % p-stable "INCLUDE">
+<!entity p-version "0.0.0">
+<!entity p-status "UNRELEASED">
+<!entity % p-not-stable "INCLUDE">
+<!entity % p-stable "IGNORE">
 <!entity % p-text "IGNORE">           <!-- define we are not a text only doc -->
 <!entity % p-authors-formal "IGNORE"> <!-- exclude additional formating      -->
 <!entity my-copy "(C)">               <!-- db2man barfs on copyright symbol  -->
@@ -151,8 +151,22 @@
      </para>
     </listitem>
   </varlistentry>
+  <varlistentry>
+    <term>--chroot</term>
+     <listitem>
+      <para>
+       Before changing to the user ID given in the --user option, chroot to that user's home
+       directory, i.e. make the kernel pretend to the Privoxy process that the directory tree
+       starts there. If set up carefully, this can limit the impact of possible vulnerabilities
+       in Privoxy to the files contained in that hierarchy.
+     </para>
+    </listitem>
+  </varlistentry>
  </variablelist>
  
+
+
+
  <para>
   If the <filename>configfile</filename> is not specified on  the  command  line,
   <command>Privoxy</command>  will  look for a file named

diff --git a/doc/source/user-manual.sgml b/doc/source/user-manual.sgml
index e146b71..e471ca5 100644 (file)
--- a/doc/source/user-manual.sgml
+++ b/doc/source/user-manual.sgml
@@ -32,7 +32,7 @@
                 This file belongs into
                 ijbswa.sourceforge.net:/home/groups/i/ij/ijbswa/htdocs/
 
- $Id: user-manual.sgml,v 1.123.2.24 2002/11/17 06:41:06 hal9 Exp $
+ $Id: user-manual.sgml,v 1.123.2.25 2003/03/15 18:36:55 oes Exp $
 
  Copyright (C) 2001, 2002 Privoxy Developers <developers@privoxy.org>
  See LICENSE.
@@ -58,7 +58,7 @@
  </subscript>
 </pubdate>
 
-<pubdate>$Id: user-manual.sgml,v 1.123.2.24 2002/11/17 06:41:06 hal9 Exp $</pubdate>
+<pubdate>$Id: user-manual.sgml,v 1.123.2.25 2003/03/15 18:36:55 oes Exp $</pubdate>
 
 <!--
 
@@ -1053,7 +1053,7 @@ Example Unix startup command:
 
 <para>
  See the section <link linkend="cmdoptions">Command line options</link> for
- furher info.
+ further info.
 </para>
 
 must find a better place for this paragraph
@@ -1207,7 +1207,20 @@ must find a better place for this paragraph
    <emphasis>USER</emphasis>, and if included the GID of GROUP.  Exit if the
    privileges are not sufficient to do so. Unix only.
   </para>
- </listitem> 
+ </listitem>
+  <listitem>
+  <para>
+   <emphasis>--chroot</emphasis>
+  
+  </para>
+  <para>
+   Before changing to the user ID given in the <emphasis>--user</emphasis> option, 
+   chroot to that user's home directory, i.e. make the kernel pretend to the Privoxy
+   process that the directory tree starts there. If set up carefully, this can limit 
+   the impact of possible vulnerabilities in Privoxy to the files contained in that hierarchy.
+   Unix only.
+  </para>
+ </listitem>
  <listitem>
   <para>
     <emphasis>configfile</emphasis>
@@ -5928,6 +5941,9 @@ In file: user.action <guibutton>[ View ]</guibutton> <guibutton>[ Edit ]</guibut
  Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 
  $Log: user-manual.sgml,v $
+ Revision 1.123.2.25  2003/03/15 18:36:55  oes
+ Adapted to the new filters
+
  Revision 1.123.2.24  2002/11/17 06:41:06  hal9
  Move default profiles table from FAQ to U-M, and other minor related changes.
  Add faq on cookies.