From 168ed53bc80a37ed91cdb0ebd5e881888f5ca6b0 Mon Sep 17 00:00:00 2001 From: Karl Berry Date: Tue, 25 May 2010 16:32:14 +0000 Subject: add fc-list git-svn-id: svn://tug.org/texlive/trunk@18479 c570f23f-e606-0410-a88d-b1316a301751 --- Master/texmf/web2c/texmf.cnf | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) (limited to 'Master/texmf/web2c') diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf index d34db470b3a..98dc16b4698 100644 --- a/Master/texmf/web2c/texmf.cnf +++ b/Master/texmf/web2c/texmf.cnf @@ -498,15 +498,19 @@ try_std_extension_first = t % enable it for everything but bare tex. shell_escape = p -% No spaces in this command list. These programs either do not write -% any output files, respect openout_any, or have hard-coded restrictions similar -% or higher to openout_any=p. And have no features (nor, to the best of our -% knowledge, obvious security holes) to invoke arbitrary other programs. +% No spaces in this command list. +% +% The programs listed here are as safe as any we know: they either do +% not write any output files, respect openout_any, or have hard-coded +% restrictions similar or higher to openout_any=p. They also have no +% features to invoke arbitrary other programs, and no known exploitable +% bugs. All to the best of our knowledge. They also have practical use +% for being called from TeX. (fc-list is used for the Lua(La)TeX system +% font cache file.) % -% Unfortunately we found too many problems with shell_escape=p, so it -% should be treated as though it were just as dangerous as shell_escape=t. shell_escape_commands = \ bibtex,bibtex8,\ +fc-list,\ kpsewhich,\ makeindex,\ repstopdf,\ -- cgit v1.2.3