diff options
-rw-r--r-- | Build/source/texk/kpathsea/ChangeLog | 5 | ||||
-rw-r--r-- | Build/source/texk/kpathsea/texmf.cnf | 16 | ||||
-rw-r--r-- | Master/texmf/web2c/texmf.cnf | 16 |
3 files changed, 25 insertions, 12 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog index fc7bb159b4b..5c929962f95 100644 --- a/Build/source/texk/kpathsea/ChangeLog +++ b/Build/source/texk/kpathsea/ChangeLog @@ -1,3 +1,8 @@ +2010-05-25 Karl Berry <karl@tug.org> + + * texmf.cnf (shell_escape_commands): include fc-list for + the luaotfload font cache. + 2010-05-24 Karl Berry <karl@tug.org> * texmf.cnf (font_mem_size): doc fix. diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf index d34db470b3a..98dc16b4698 100644 --- a/Build/source/texk/kpathsea/texmf.cnf +++ b/Build/source/texk/kpathsea/texmf.cnf @@ -498,15 +498,19 @@ try_std_extension_first = t % enable it for everything but bare tex. shell_escape = p -% No spaces in this command list. These programs either do not write -% any output files, respect openout_any, or have hard-coded restrictions similar -% or higher to openout_any=p. And have no features (nor, to the best of our -% knowledge, obvious security holes) to invoke arbitrary other programs. +% No spaces in this command list. +% +% The programs listed here are as safe as any we know: they either do +% not write any output files, respect openout_any, or have hard-coded +% restrictions similar or higher to openout_any=p. They also have no +% features to invoke arbitrary other programs, and no known exploitable +% bugs. All to the best of our knowledge. They also have practical use +% for being called from TeX. (fc-list is used for the Lua(La)TeX system +% font cache file.) % -% Unfortunately we found too many problems with shell_escape=p, so it -% should be treated as though it were just as dangerous as shell_escape=t. shell_escape_commands = \ bibtex,bibtex8,\ +fc-list,\ kpsewhich,\ makeindex,\ repstopdf,\ diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf index d34db470b3a..98dc16b4698 100644 --- a/Master/texmf/web2c/texmf.cnf +++ b/Master/texmf/web2c/texmf.cnf @@ -498,15 +498,19 @@ try_std_extension_first = t % enable it for everything but bare tex. shell_escape = p -% No spaces in this command list. These programs either do not write -% any output files, respect openout_any, or have hard-coded restrictions similar -% or higher to openout_any=p. And have no features (nor, to the best of our -% knowledge, obvious security holes) to invoke arbitrary other programs. +% No spaces in this command list. +% +% The programs listed here are as safe as any we know: they either do +% not write any output files, respect openout_any, or have hard-coded +% restrictions similar or higher to openout_any=p. They also have no +% features to invoke arbitrary other programs, and no known exploitable +% bugs. All to the best of our knowledge. They also have practical use +% for being called from TeX. (fc-list is used for the Lua(La)TeX system +% font cache file.) % -% Unfortunately we found too many problems with shell_escape=p, so it -% should be treated as though it were just as dangerous as shell_escape=t. shell_escape_commands = \ bibtex,bibtex8,\ +fc-list,\ kpsewhich,\ makeindex,\ repstopdf,\ |