summaryrefslogtreecommitdiff
path: root/Build
diff options
context:
space:
mode:
authorManuel Pégourié-Gonnard <mpg@elzevir.fr>2009-10-15 00:01:33 +0000
committerManuel Pégourié-Gonnard <mpg@elzevir.fr>2009-10-15 00:01:33 +0000
commit16a7e6a574f3844d5fab11d2ed5f85778f721aee (patch)
treec8f9cb452add4c173b9bc2bbaee5373a819f8fdd /Build
parentf698b9ac7e3ded60253b10aa12bacc34db3dec43 (diff)
add repstopdf to shell_escape_commands
git-svn-id: svn://tug.org/texlive/trunk@15800 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build')
-rw-r--r--Build/source/texk/kpathsea/ChangeLog5
-rw-r--r--Build/source/texk/kpathsea/texmf.cnf14
2 files changed, 14 insertions, 5 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog
index caee7928846..b8133a99135 100644
--- a/Build/source/texk/kpathsea/ChangeLog
+++ b/Build/source/texk/kpathsea/ChangeLog
@@ -1,3 +1,8 @@
+2009-10-15 Manuel Pégourié-Gonnard <mpg@elzevir.fr>
+
+ * texmf.cnf (shell_escape_commands): add repstopdf, a version of
+ epstopdf with restrictions intended to make it safer.
+
2009-10-13 Karl Berry <karl@tug.org>
* texmf.cnf (shell_escape_commands): remove the ps-to-pdf programs
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index 6831580d478..a23924b6088 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -492,11 +492,13 @@ try_std_extension_first = t
shell_escape = p
% No spaces in this command list. These programs either do not write
-% any output files or respect openout_any. And have no features to
-% invoke other programs.
+% any output files, respect openout_any, or have hard-coded restrictions similar
+% or higher to openout_any=p. And have no features (nor, to the best of our
+% knowledge, security holes) to invoke arbitrary other programs.
shell_escape_commands = \
-bibtex,bibtex8,fc-match,\
-kpsewhich,makeindex,\
+kpsewhich,fc-match,\
+bibtex,bibtex8,makeindex,\
+repstopdf,\
% we'd like to allow:
% dvips - but external commands can be executed, need at least -R1.
@@ -504,11 +506,13 @@ kpsewhich,makeindex,\
% without Unix convert it hardly seems worth it, and Windows convert
% is something completely different that destroys filesystems, so
% skip it.
-% epspdf, epstopdf, ps2pdf, pstopdf, rpdfcrop - need to respect openout_any.
+% epspdf, epstopdf, ps2pdf, pstopdf, rpdfcrop - need to respect openout_any,
+% and we need to make sure -dSAFER is used and no injection is possible.
% pygmentize - but is the filter feature insecure?
% ps4pdf - but it calls an unrestricted latex.
% texindy,xindy - but is the module feature insecure?
% ulqda - but requires optional SHA1.pm, so why bother.
+% tex, latex, etc - but need to forbid --shell-escape, and inherit openout_any
% plain TeX should remain unenhanced.
shell_escape.tex = f