summaryrefslogtreecommitdiff
path: root/Build/source
diff options
context:
space:
mode:
authorManuel Pégourié-Gonnard <mpg@elzevir.fr>2009-10-15 10:10:51 +0000
committerManuel Pégourié-Gonnard <mpg@elzevir.fr>2009-10-15 10:10:51 +0000
commita734a76c0704b4d919c1d91e817695a33252c7e4 (patch)
treedfe8ad953565343bb4b7725e8aee4c6f3c605372 /Build/source
parent2be7defbc93649fbb329c352b0de611c6df91429 (diff)
Disallow bibtex & makeindex from \write18: don't respect openout_any.
git-svn-id: svn://tug.org/texlive/trunk@15804 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source')
-rw-r--r--Build/source/texk/kpathsea/ChangeLog1
-rw-r--r--Build/source/texk/kpathsea/texmf.cnf4
2 files changed, 3 insertions, 2 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog
index b8133a99135..318ebb85136 100644
--- a/Build/source/texk/kpathsea/ChangeLog
+++ b/Build/source/texk/kpathsea/ChangeLog
@@ -2,6 +2,7 @@
* texmf.cnf (shell_escape_commands): add repstopdf, a version of
epstopdf with restrictions intended to make it safer.
+ Remove bibtex & makeindex for now, they don't respect openout_any.
2009-10-13 Karl Berry <karl@tug.org>
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index a23924b6088..e3ccbf409b3 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -494,10 +494,9 @@ shell_escape = p
% No spaces in this command list. These programs either do not write
% any output files, respect openout_any, or have hard-coded restrictions similar
% or higher to openout_any=p. And have no features (nor, to the best of our
-% knowledge, security holes) to invoke arbitrary other programs.
+% knowledge, obvious security holes) to invoke arbitrary other programs.
shell_escape_commands = \
kpsewhich,fc-match,\
-bibtex,bibtex8,makeindex,\
repstopdf,\
% we'd like to allow:
@@ -513,6 +512,7 @@ repstopdf,\
% texindy,xindy - but is the module feature insecure?
% ulqda - but requires optional SHA1.pm, so why bother.
% tex, latex, etc - but need to forbid --shell-escape, and inherit openout_any
+% bibtex,bibtex8,makeindex, - don't respect openout_any
% plain TeX should remain unenhanced.
shell_escape.tex = f