diff options
author | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | 2009-10-15 10:10:51 +0000 |
---|---|---|
committer | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | 2009-10-15 10:10:51 +0000 |
commit | a734a76c0704b4d919c1d91e817695a33252c7e4 (patch) | |
tree | dfe8ad953565343bb4b7725e8aee4c6f3c605372 | |
parent | 2be7defbc93649fbb329c352b0de611c6df91429 (diff) |
Disallow bibtex & makeindex from \write18: don't respect openout_any.
git-svn-id: svn://tug.org/texlive/trunk@15804 c570f23f-e606-0410-a88d-b1316a301751
-rw-r--r-- | Build/source/texk/kpathsea/ChangeLog | 1 | ||||
-rw-r--r-- | Build/source/texk/kpathsea/texmf.cnf | 4 | ||||
-rw-r--r-- | Master/texmf/web2c/texmf.cnf | 4 |
3 files changed, 5 insertions, 4 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog index b8133a99135..318ebb85136 100644 --- a/Build/source/texk/kpathsea/ChangeLog +++ b/Build/source/texk/kpathsea/ChangeLog @@ -2,6 +2,7 @@ * texmf.cnf (shell_escape_commands): add repstopdf, a version of epstopdf with restrictions intended to make it safer. + Remove bibtex & makeindex for now, they don't respect openout_any. 2009-10-13 Karl Berry <karl@tug.org> diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf index a23924b6088..e3ccbf409b3 100644 --- a/Build/source/texk/kpathsea/texmf.cnf +++ b/Build/source/texk/kpathsea/texmf.cnf @@ -494,10 +494,9 @@ shell_escape = p % No spaces in this command list. These programs either do not write % any output files, respect openout_any, or have hard-coded restrictions similar % or higher to openout_any=p. And have no features (nor, to the best of our -% knowledge, security holes) to invoke arbitrary other programs. +% knowledge, obvious security holes) to invoke arbitrary other programs. shell_escape_commands = \ kpsewhich,fc-match,\ -bibtex,bibtex8,makeindex,\ repstopdf,\ % we'd like to allow: @@ -513,6 +512,7 @@ repstopdf,\ % texindy,xindy - but is the module feature insecure? % ulqda - but requires optional SHA1.pm, so why bother. % tex, latex, etc - but need to forbid --shell-escape, and inherit openout_any +% bibtex,bibtex8,makeindex, - don't respect openout_any % plain TeX should remain unenhanced. shell_escape.tex = f diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf index a23924b6088..e3ccbf409b3 100644 --- a/Master/texmf/web2c/texmf.cnf +++ b/Master/texmf/web2c/texmf.cnf @@ -494,10 +494,9 @@ shell_escape = p % No spaces in this command list. These programs either do not write % any output files, respect openout_any, or have hard-coded restrictions similar % or higher to openout_any=p. And have no features (nor, to the best of our -% knowledge, security holes) to invoke arbitrary other programs. +% knowledge, obvious security holes) to invoke arbitrary other programs. shell_escape_commands = \ kpsewhich,fc-match,\ -bibtex,bibtex8,makeindex,\ repstopdf,\ % we'd like to allow: @@ -513,6 +512,7 @@ repstopdf,\ % texindy,xindy - but is the module feature insecure? % ulqda - but requires optional SHA1.pm, so why bother. % tex, latex, etc - but need to forbid --shell-escape, and inherit openout_any +% bibtex,bibtex8,makeindex, - don't respect openout_any % plain TeX should remain unenhanced. shell_escape.tex = f |