summaryrefslogtreecommitdiff
path: root/Build/source/texk/kpathsea/texmf.cnf
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2016-02-17 19:20:30 +0000
committerKarl Berry <karl@freefriends.org>2016-02-17 19:20:30 +0000
commitc83ce1e2407f5388608ba5325601efb79ce9cb9f (patch)
tree3e6453174e81c032c75a217231e6227f1caba2c4 /Build/source/texk/kpathsea/texmf.cnf
parentb5cbd5da469f0c9afeac325223ffee89684df9f7 (diff)
set openout_any to a (instead of p) for all the luatex engines
git-svn-id: svn://tug.org/texlive/trunk@39755 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/kpathsea/texmf.cnf')
-rw-r--r--Build/source/texk/kpathsea/texmf.cnf16
1 files changed, 15 insertions, 1 deletions
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index 33cc0b7c229..547219ba077 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -601,7 +601,21 @@ TEXMF_RESTRICTED_SCRIPTS = \
openin_any = a
openout_any = p
-% Write .log/.dvi/etc. files here, if the current directory is unwritable.
+% As of TeX Live 2016, the LuaTeX engines reimplemented the `p' setting
+% such that even the simplest documents could not be run. Besides, most
+% safeguards can be bypassed through Lua with sufficient effort.
+% Therefore we specific the reality here. For those concerned with
+% security and luatex, the --safer option is the place to start, and
+% running entirely in a sandboxed environment (ConTeXt has support for
+% this) is probably the place to end.
+openout_any.dvilualatex = a
+openout_any.dviluatex = a
+openout_any.luajittex = a
+openout_any.lualatex = a
+openout_any.lualollipop = a
+openout_any.luatex = a
+
+% Write .log/.dvi/.aux/etc. files here, if the current directory is unwritable.
%TEXMFOUTPUT = /tmp
% If a dynamic file creation fails, log the command to this file, in