summaryrefslogtreecommitdiff
path: root/source/l/imagemagick/policy.xml.diff
diff options
context:
space:
mode:
Diffstat (limited to 'source/l/imagemagick/policy.xml.diff')
-rw-r--r--source/l/imagemagick/policy.xml.diff18
1 files changed, 10 insertions, 8 deletions
diff --git a/source/l/imagemagick/policy.xml.diff b/source/l/imagemagick/policy.xml.diff
index 04b3a105..4937fa65 100644
--- a/source/l/imagemagick/policy.xml.diff
+++ b/source/l/imagemagick/policy.xml.diff
@@ -1,6 +1,6 @@
---- ./config/policy.xml.orig 2017-07-15 12:33:46.000000000 -0500
-+++ ./config/policy.xml 2017-07-17 20:14:07.785459021 -0500
-@@ -55,6 +55,21 @@
+--- ./config/policy.xml.orig 2020-11-01 12:48:38.817043527 -0600
++++ ./config/policy.xml 2020-11-01 12:51:00.357046694 -0600
+@@ -52,6 +52,21 @@
<policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" />
-->
<policymap>
@@ -19,12 +19,14 @@
+ <!-- SECURITY: prevent pipe to shell: -->
+ <policy domain="path" rights="none" pattern="|*" />
+ <!-- Some examples: -->
- <!-- <policy domain="system" name="shred" value="2"/> -->
- <!-- <policy domain="system" name="precision" value="6"/> -->
- <!-- <policy domain="system" name="memory-map" value="anonymous"/> -->
-@@ -75,5 +90,4 @@
- <!-- <policy domain="path" rights="none" pattern="@*" /> -->
+ <!-- <policy domain="resource" name="temporary-path" value="/tmp"/> -->
+ <!-- <policy domain="resource" name="memory" value="2GiB"/> -->
+ <!-- <policy domain="resource" name="map" value="4GiB"/> -->
+@@ -71,7 +86,6 @@
<!-- <policy domain="cache" name="memory-map" value="anonymous"/> -->
+ <!-- <policy domain="cache" name="max-memory-request" value="256MiB"/> -->
<!-- <policy domain="cache" name="synchronize" value="True"/> -->
- <!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> -->
+ <!-- <policy domain="system" name="shred" value="2"/> -->
+ <!-- <policy domain="system" name="precision" value="6"/> -->
</policymap>