summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2009-08-15 00:59:22 +0000
committerKarl Berry <karl@freefriends.org>2009-08-15 00:59:22 +0000
commit9cd7acf2b71f46eb1c8fd1d315f4d4c0f312d1a6 (patch)
tree5f116e2e343ff8eb1b77c448525d3ba6ee7e94f5
parent8e55f456e3be8accc28283ebae19542a7a7e29b9 (diff)
remove more shell_escape_commands
git-svn-id: svn://tug.org/texlive/trunk@14685 c570f23f-e606-0410-a88d-b1316a301751
-rw-r--r--Build/source/texk/kpathsea/ChangeLog5
-rw-r--r--Build/source/texk/kpathsea/texmf.cnf20
-rw-r--r--Master/texmf/web2c/texmf.cnf20
3 files changed, 35 insertions, 10 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog
index 1420cb9256d..8b7bf6c4601 100644
--- a/Build/source/texk/kpathsea/ChangeLog
+++ b/Build/source/texk/kpathsea/ChangeLog
@@ -1,3 +1,8 @@
+2009-08-15 Karl Berry <karl@tug.org>
+
+ * texmf.cnf (shell_escape_commands): remove many more,
+ mail from Heiko, 14 Aug 2009 07:58:02 et al.
+
2009-07-23 Karl Berry <karl@tug.org>
* mktexlsr: update help msg.
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index abaac2a7d47..d48d2b81ae2 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -498,11 +498,21 @@ shell_escape = p
% No spaces in this command list.
shell_escape_commands = \
-bibtex,bibtex8,dvips,epstopdf,epspdf,etex,fc-match,\
-imgconvert,\
-kpsewhich,makeindex,mkgrkindex,\
-pdfluatex,ps2pdf,ps4pdf,pstopdf,pygmentize,\
-rpdfcrop,texindy,xindy,ulqda\
+bibtex,bibtex8,epstopdf,epspdf,fc-match,\
+kpsewhich,makeindex,\
+ps2pdf,pstopdf,pygmentize,\
+rpdfcrop,\
+
+% we'd like to allow:
+% dvips - but external commands can be executed, need at least -R1.
+% (img)convert (ImageMagick) - delegates.mgk possible misconfig, besides,
+% without Unix convert it hardly seems worth it, and Windows convert
+% is something completely different that destroys filesystems, so
+% skip it.
+% pygmentize - but is the filter feature insecure?
+% ps4pdf - but it calls an unrestricted latex.
+% texindy,xindy - but is the module feature insecure?
+% ulqda - but requires optional SHA1.pm, so why bother.
% plain TeX should remain unenhanced.
shell_escape.tex = f
diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf
index abaac2a7d47..d48d2b81ae2 100644
--- a/Master/texmf/web2c/texmf.cnf
+++ b/Master/texmf/web2c/texmf.cnf
@@ -498,11 +498,21 @@ shell_escape = p
% No spaces in this command list.
shell_escape_commands = \
-bibtex,bibtex8,dvips,epstopdf,epspdf,etex,fc-match,\
-imgconvert,\
-kpsewhich,makeindex,mkgrkindex,\
-pdfluatex,ps2pdf,ps4pdf,pstopdf,pygmentize,\
-rpdfcrop,texindy,xindy,ulqda\
+bibtex,bibtex8,epstopdf,epspdf,fc-match,\
+kpsewhich,makeindex,\
+ps2pdf,pstopdf,pygmentize,\
+rpdfcrop,\
+
+% we'd like to allow:
+% dvips - but external commands can be executed, need at least -R1.
+% (img)convert (ImageMagick) - delegates.mgk possible misconfig, besides,
+% without Unix convert it hardly seems worth it, and Windows convert
+% is something completely different that destroys filesystems, so
+% skip it.
+% pygmentize - but is the filter feature insecure?
+% ps4pdf - but it calls an unrestricted latex.
+% texindy,xindy - but is the module feature insecure?
+% ulqda - but requires optional SHA1.pm, so why bother.
% plain TeX should remain unenhanced.
shell_escape.tex = f