summaryrefslogtreecommitdiff
path: root/Master/texmf/web2c
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2010-05-25 16:32:14 +0000
committerKarl Berry <karl@freefriends.org>2010-05-25 16:32:14 +0000
commit168ed53bc80a37ed91cdb0ebd5e881888f5ca6b0 (patch)
tree37d0d09d350335d501376a983d19e3994a53b8a8 /Master/texmf/web2c
parent5a7cf63a1fd66f95a7aba3d5b53ff5289ca2289a (diff)
add fc-list
git-svn-id: svn://tug.org/texlive/trunk@18479 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Master/texmf/web2c')
-rw-r--r--Master/texmf/web2c/texmf.cnf16
1 files changed, 10 insertions, 6 deletions
diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf
index d34db470b3a..98dc16b4698 100644
--- a/Master/texmf/web2c/texmf.cnf
+++ b/Master/texmf/web2c/texmf.cnf
@@ -498,15 +498,19 @@ try_std_extension_first = t
% enable it for everything but bare tex.
shell_escape = p
-% No spaces in this command list. These programs either do not write
-% any output files, respect openout_any, or have hard-coded restrictions similar
-% or higher to openout_any=p. And have no features (nor, to the best of our
-% knowledge, obvious security holes) to invoke arbitrary other programs.
+% No spaces in this command list.
+%
+% The programs listed here are as safe as any we know: they either do
+% not write any output files, respect openout_any, or have hard-coded
+% restrictions similar or higher to openout_any=p. They also have no
+% features to invoke arbitrary other programs, and no known exploitable
+% bugs. All to the best of our knowledge. They also have practical use
+% for being called from TeX. (fc-list is used for the Lua(La)TeX system
+% font cache file.)
%
-% Unfortunately we found too many problems with shell_escape=p, so it
-% should be treated as though it were just as dangerous as shell_escape=t.
shell_escape_commands = \
bibtex,bibtex8,\
+fc-list,\
kpsewhich,\
makeindex,\
repstopdf,\