Patch below turns off the following ancient protocols built into lynx: bibp, finger, gopher, and news.
For some urls, lynx will invoke an external command. Turn off telnet, rlogin and tn3270 urls by defining them to false(1) as documented in the lynx manual. Finally, turn off the file editor which can be accessed with "g.<enter>" using the --disable-dired switch. ok to commit? Index: Makefile.bsd-wrapper =================================================================== RCS file: /home/cvs/src/gnu/usr.bin/lynx/Makefile.bsd-wrapper,v retrieving revision 1.24 diff -u -p -u -r1.24 Makefile.bsd-wrapper --- Makefile.bsd-wrapper 15 Apr 2014 20:55:42 -0000 1.24 +++ Makefile.bsd-wrapper 11 Jul 2014 02:47:31 -0000 @@ -5,7 +5,10 @@ CLEANFILES+= lynx.1 DPADD= ${LIBSSL} ${LIBCRYPTO} GNUCFLAGS= CC="${CC}" CFLAGS="${CFLAGS} ${COPTS} ${OPT}" LDFLAGS="${LDFLAGS}" -CONFIGURE_ARGS= --with-ssl=/usr --enable-widec --enable-ipv6 --enable-debug +CONFIGURE_ARGS= --with-ssl=/usr --enable-widec --enable-ipv6 --enable-debug \ + --disable-bibp-urls --disable-finger --disable-gopher --disable-news \ + --disable-dired + HTMLDIR= /usr/share/doc/html HELPFILES= keystrokes/alt_edit_help.html keystrokes/bookmark_help.html \ keystrokes/cookie_help.html keystrokes/dired_help.html \ @@ -39,12 +42,18 @@ config: .FORCE PATH="/bin:/usr/bin:/sbin:/usr/sbin" \ ${GNUCFLAGS} \ INSTALL_PROGRAM="${INSTALL} ${INSTALL_COPY} ${INSTALL_STRIP}" \ + TELNET=/usr/bin/false \ + RLOGIN=/usr/bin/false \ + TN3270=/usr/bin/false \ sh ${.CURDIR}/configure --prefix=/usr --sysconfdir=/etc --disable-color-style ${CONFIGURE_ARGS} config.status: PATH="/bin:/usr/bin:/sbin:/usr/sbin" \ ${GNUCFLAGS} \ INSTALL_PROGRAM="${INSTALL} ${INSTALL_COPY} ${INSTALL_STRIP}" \ + TELNET=/usr/bin/false \ + RLOGIN=/usr/bin/false \ + TN3270=/usr/bin/false \ sh ${.CURDIR}/configure --prefix=/usr --sysconfdir=/etc --disable-color-style ${CONFIGURE_ARGS} ${CF} lynx.1: ${.CURDIR}/lynx.man