implement option in text and perltk installer to deactivate

restricted execution of programs via write18


git-svn-id: svn://tug.org/texlive/trunk@14659 c570f23f-e606-0410-a88d-b1316a301751

1 files changed, 15 insertions, 0 deletions

diff --git a/Master/install-tl b/Master/install-tl
index eed559f1088..2617c6ea8df 100755
--- a/Master/install-tl
+++ b/Master/install-tl
@@ -905,6 +905,20 @@ sub do_texmf_cnf {
 EOF
 ;
     foreach (@changedtmf) { print TMF; }
+    #
+    # save the setting of shell_escape to the generated system texmf.cnf
+    # default in texmf/web2c/texmf.cnf is 
+    #   shell_escape = p
+    # so we write that only if the user *deselected* this option
+    if (!$vars{"option_restricted"}) {
+      print TMF <<EOF;
+% Disable system commands via \\write18{...}. Please see
+%   texmf/web2c/texmf.cnf
+% for more details.
+shell_escape = 0
+EOF
+;
+    }
   } else {
     $TMF = ">$vars{'TEXMFSYSVAR'}/web2c/texmf.cnf";
     open (TMF, $TMF) || die "open($TMF) failed: $!\n";
@@ -1141,6 +1155,7 @@ sub load_tlpdb {
   $vars{'option_sys_bin'} = $tlpdb->option("sys_bin");
   $vars{'option_sys_man'} = $tlpdb->option("sys_man");
   $vars{'option_sys_info'} = $tlpdb->option("sys_info");
+  $vars{'option_restricted'} = $tlpdb->option("restricted");
 
   # check that the default scheme is actually present, otherwise switch to
   # scheme-minimal