summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--Build/source/texk/kpathsea/ChangeLog5
-rw-r--r--Build/source/texk/kpathsea/texmf.cnf13
-rw-r--r--Master/texmf/web2c/texmf.cnf13
3 files changed, 15 insertions, 16 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog
index a34cb56801a..caee7928846 100644
--- a/Build/source/texk/kpathsea/ChangeLog
+++ b/Build/source/texk/kpathsea/ChangeLog
@@ -1,3 +1,8 @@
+2009-10-13 Karl Berry <karl@tug.org>
+
+ * texmf.cnf (shell_escape_commands): remove the ps-to-pdf programs
+ for now, they don't respect openout_any.
+
2009-10-09 Karl Berry <karl@tug.org>
* texmf.cnf (TEXDOC): omit now-unneeded man for texdoc (from mpg).
diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf
index 98c1f1a189f..6831580d478 100644
--- a/Build/source/texk/kpathsea/texmf.cnf
+++ b/Build/source/texk/kpathsea/texmf.cnf
@@ -491,16 +491,12 @@ try_std_extension_first = t
% enable it for everything but bare tex.
shell_escape = p
-% Special: convert is the standard command name for ImageMagick, but it
-% is also the name of a dangerous filesystem-changing command on
-% Windows. So enable imgconvert (used in w32tex), but not convert.
-
-% No spaces in this command list.
+% No spaces in this command list. These programs either do not write
+% any output files or respect openout_any. And have no features to
+% invoke other programs.
shell_escape_commands = \
-bibtex,bibtex8,epstopdf,epspdf,fc-match,\
+bibtex,bibtex8,fc-match,\
kpsewhich,makeindex,\
-ps2pdf,pstopdf,\
-rpdfcrop,\
% we'd like to allow:
% dvips - but external commands can be executed, need at least -R1.
@@ -508,6 +504,7 @@ rpdfcrop,\
% without Unix convert it hardly seems worth it, and Windows convert
% is something completely different that destroys filesystems, so
% skip it.
+% epspdf, epstopdf, ps2pdf, pstopdf, rpdfcrop - need to respect openout_any.
% pygmentize - but is the filter feature insecure?
% ps4pdf - but it calls an unrestricted latex.
% texindy,xindy - but is the module feature insecure?
diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf
index 98c1f1a189f..6831580d478 100644
--- a/Master/texmf/web2c/texmf.cnf
+++ b/Master/texmf/web2c/texmf.cnf
@@ -491,16 +491,12 @@ try_std_extension_first = t
% enable it for everything but bare tex.
shell_escape = p
-% Special: convert is the standard command name for ImageMagick, but it
-% is also the name of a dangerous filesystem-changing command on
-% Windows. So enable imgconvert (used in w32tex), but not convert.
-
-% No spaces in this command list.
+% No spaces in this command list. These programs either do not write
+% any output files or respect openout_any. And have no features to
+% invoke other programs.
shell_escape_commands = \
-bibtex,bibtex8,epstopdf,epspdf,fc-match,\
+bibtex,bibtex8,fc-match,\
kpsewhich,makeindex,\
-ps2pdf,pstopdf,\
-rpdfcrop,\
% we'd like to allow:
% dvips - but external commands can be executed, need at least -R1.
@@ -508,6 +504,7 @@ rpdfcrop,\
% without Unix convert it hardly seems worth it, and Windows convert
% is something completely different that destroys filesystems, so
% skip it.
+% epspdf, epstopdf, ps2pdf, pstopdf, rpdfcrop - need to respect openout_any.
% pygmentize - but is the filter feature insecure?
% ps4pdf - but it calls an unrestricted latex.
% texindy,xindy - but is the module feature insecure?