diff options
Diffstat (limited to 'Build/source/texk/kpathsea')
| -rw-r--r-- | Build/source/texk/kpathsea/ChangeLog | 5 | ||||
| -rw-r--r-- | Build/source/texk/kpathsea/texmf.cnf | 13 |
2 files changed, 10 insertions, 8 deletions
diff --git a/Build/source/texk/kpathsea/ChangeLog b/Build/source/texk/kpathsea/ChangeLog index a34cb56801a..caee7928846 100644 --- a/Build/source/texk/kpathsea/ChangeLog +++ b/Build/source/texk/kpathsea/ChangeLog @@ -1,3 +1,8 @@ +2009-10-13 Karl Berry <karl@tug.org> + + * texmf.cnf (shell_escape_commands): remove the ps-to-pdf programs + for now, they don't respect openout_any. + 2009-10-09 Karl Berry <karl@tug.org> * texmf.cnf (TEXDOC): omit now-unneeded man for texdoc (from mpg). diff --git a/Build/source/texk/kpathsea/texmf.cnf b/Build/source/texk/kpathsea/texmf.cnf index 98c1f1a189f..6831580d478 100644 --- a/Build/source/texk/kpathsea/texmf.cnf +++ b/Build/source/texk/kpathsea/texmf.cnf @@ -491,16 +491,12 @@ try_std_extension_first = t % enable it for everything but bare tex. shell_escape = p -% Special: convert is the standard command name for ImageMagick, but it -% is also the name of a dangerous filesystem-changing command on -% Windows. So enable imgconvert (used in w32tex), but not convert. - -% No spaces in this command list. +% No spaces in this command list. These programs either do not write +% any output files or respect openout_any. And have no features to +% invoke other programs. shell_escape_commands = \ -bibtex,bibtex8,epstopdf,epspdf,fc-match,\ +bibtex,bibtex8,fc-match,\ kpsewhich,makeindex,\ -ps2pdf,pstopdf,\ -rpdfcrop,\ % we'd like to allow: % dvips - but external commands can be executed, need at least -R1. @@ -508,6 +504,7 @@ rpdfcrop,\ % without Unix convert it hardly seems worth it, and Windows convert % is something completely different that destroys filesystems, so % skip it. +% epspdf, epstopdf, ps2pdf, pstopdf, rpdfcrop - need to respect openout_any. % pygmentize - but is the filter feature insecure? % ps4pdf - but it calls an unrestricted latex. % texindy,xindy - but is the module feature insecure? |