diff options
Diffstat (limited to 'source/l/imagemagick/policy.xml.diff')
| -rw-r--r-- | source/l/imagemagick/policy.xml.diff | 18 |
1 files changed, 10 insertions, 8 deletions
diff --git a/source/l/imagemagick/policy.xml.diff b/source/l/imagemagick/policy.xml.diff index 04b3a105..4937fa65 100644 --- a/source/l/imagemagick/policy.xml.diff +++ b/source/l/imagemagick/policy.xml.diff @@ -1,6 +1,6 @@ ---- ./config/policy.xml.orig 2017-07-15 12:33:46.000000000 -0500 -+++ ./config/policy.xml 2017-07-17 20:14:07.785459021 -0500 -@@ -55,6 +55,21 @@ +--- ./config/policy.xml.orig 2020-11-01 12:48:38.817043527 -0600 ++++ ./config/policy.xml 2020-11-01 12:51:00.357046694 -0600 +@@ -52,6 +52,21 @@ <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" /> --> <policymap> @@ -19,12 +19,14 @@ + <!-- SECURITY: prevent pipe to shell: --> + <policy domain="path" rights="none" pattern="|*" /> + <!-- Some examples: --> - <!-- <policy domain="system" name="shred" value="2"/> --> - <!-- <policy domain="system" name="precision" value="6"/> --> - <!-- <policy domain="system" name="memory-map" value="anonymous"/> --> -@@ -75,5 +90,4 @@ - <!-- <policy domain="path" rights="none" pattern="@*" /> --> + <!-- <policy domain="resource" name="temporary-path" value="/tmp"/> --> + <!-- <policy domain="resource" name="memory" value="2GiB"/> --> + <!-- <policy domain="resource" name="map" value="4GiB"/> --> +@@ -71,7 +86,6 @@ <!-- <policy domain="cache" name="memory-map" value="anonymous"/> --> + <!-- <policy domain="cache" name="max-memory-request" value="256MiB"/> --> <!-- <policy domain="cache" name="synchronize" value="True"/> --> - <!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> --> + <!-- <policy domain="system" name="shred" value="2"/> --> + <!-- <policy domain="system" name="precision" value="6"/> --> </policymap> |