diff options
| author | Karl Berry <karl@freefriends.org> | 2009-08-15 00:59:22 +0000 |
|---|---|---|
| committer | Karl Berry <karl@freefriends.org> | 2009-08-15 00:59:22 +0000 |
| commit | 9cd7acf2b71f46eb1c8fd1d315f4d4c0f312d1a6 (patch) | |
| tree | 5f116e2e343ff8eb1b77c448525d3ba6ee7e94f5 | |
| parent | 8e55f456e3be8accc28283ebae19542a7a7e29b9 (diff) | |
remove more shell_escape_commands
git-svn-id: svn://tug.org/texlive/trunk@14685 c570f23f-e606-0410-a88d-b1316a301751
| -rw-r--r-- | Build/source/texk/kpathsea/ChangeLog | 5 | ||||
| -rw-r--r-- | Build/source/texk/kpathsea/texmf.cnf | 20 | ||||
| -rw-r--r-- | Master/texmf/web2c/texmf.cnf | 20 |
3 files changed, 35 insertions, 10 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog index 1420cb9256d..8b7bf6c4601 100644 --- a/Build/source/texk/kpathsea/ChangeLog +++ b/Build/source/texk/kpathsea/ChangeLog @@ -1,3 +1,8 @@ +2009-08-15 Karl Berry <karl@tug.org> + + * texmf.cnf (shell_escape_commands): remove many more, + mail from Heiko, 14 Aug 2009 07:58:02 et al. + 2009-07-23 Karl Berry <karl@tug.org> * mktexlsr: update help msg. diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf index abaac2a7d47..d48d2b81ae2 100644 --- a/Build/source/texk/kpathsea/texmf.cnf +++ b/Build/source/texk/kpathsea/texmf.cnf @@ -498,11 +498,21 @@ shell_escape = p % No spaces in this command list. shell_escape_commands = \ -bibtex,bibtex8,dvips,epstopdf,epspdf,etex,fc-match,\ -imgconvert,\ -kpsewhich,makeindex,mkgrkindex,\ -pdfluatex,ps2pdf,ps4pdf,pstopdf,pygmentize,\ -rpdfcrop,texindy,xindy,ulqda\ +bibtex,bibtex8,epstopdf,epspdf,fc-match,\ +kpsewhich,makeindex,\ +ps2pdf,pstopdf,pygmentize,\ +rpdfcrop,\ + +% we'd like to allow: +% dvips - but external commands can be executed, need at least -R1. +% (img)convert (ImageMagick) - delegates.mgk possible misconfig, besides, +% without Unix convert it hardly seems worth it, and Windows convert +% is something completely different that destroys filesystems, so +% skip it. +% pygmentize - but is the filter feature insecure? +% ps4pdf - but it calls an unrestricted latex. +% texindy,xindy - but is the module feature insecure? +% ulqda - but requires optional SHA1.pm, so why bother. % plain TeX should remain unenhanced. shell_escape.tex = f diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf index abaac2a7d47..d48d2b81ae2 100644 --- a/Master/texmf/web2c/texmf.cnf +++ b/Master/texmf/web2c/texmf.cnf @@ -498,11 +498,21 @@ shell_escape = p % No spaces in this command list. shell_escape_commands = \ -bibtex,bibtex8,dvips,epstopdf,epspdf,etex,fc-match,\ -imgconvert,\ -kpsewhich,makeindex,mkgrkindex,\ -pdfluatex,ps2pdf,ps4pdf,pstopdf,pygmentize,\ -rpdfcrop,texindy,xindy,ulqda\ +bibtex,bibtex8,epstopdf,epspdf,fc-match,\ +kpsewhich,makeindex,\ +ps2pdf,pstopdf,pygmentize,\ +rpdfcrop,\ + +% we'd like to allow: +% dvips - but external commands can be executed, need at least -R1. +% (img)convert (ImageMagick) - delegates.mgk possible misconfig, besides, +% without Unix convert it hardly seems worth it, and Windows convert +% is something completely different that destroys filesystems, so +% skip it. +% pygmentize - but is the filter feature insecure? +% ps4pdf - but it calls an unrestricted latex. +% texindy,xindy - but is the module feature insecure? +% ulqda - but requires optional SHA1.pm, so why bother. % plain TeX should remain unenhanced. shell_escape.tex = f |