From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.tex.context/15347 Path: main.gmane.org!not-for-mail From: "Adam Lindsay" Newsgroups: gmane.comp.tex.macosx,gmane.comp.tex.context Subject: Shell escape & ConTeXt (was: Re: EPS to PDF--en masse?) Date: Tue, 8 Jun 2004 16:52:10 +0100 Sender: Message-ID: <20040608165210.6918@mail.comp.lancs.ac.uk> References: <83201.89697@email.esm.psu.edu> Reply-To: "TeX on Mac OS X Mailing List" NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1086709951 7219 80.91.224.253 (8 Jun 2004 15:52:31 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 8 Jun 2004 15:52:31 +0000 (UTC) Original-X-From: MacOSX-TeX-yNUTs0qEFpZ/1wmUHrjjoYdd74u8MsAO@public.gmane.org Tue Jun 08 17:52:22 2004 Return-path: Original-Received: from secmail1.ecs.psu.edu ([130.203.232.20]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1BXiti-0002AU-00 for ; Tue, 08 Jun 2004 17:52:22 +0200 Original-Received: from localhost (secmail1.ecs.psu.edu [127.0.0.1]) by secmail1.ecs.psu.edu (Postfix) with ESMTP id B76F72F9621; Tue, 8 Jun 2004 11:53:06 -0400 (EDT) Original-Received: from secmail1.ecs.psu.edu ([127.0.0.1]) by localhost (secmail1.ecs.psu.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12624-09; Tue, 8 Jun 2004 11:53:05 -0400 (EDT) Original-Received: from email.esm.psu.edu (email.esm.psu.edu [130.203.247.204]) by secmail1.ecs.psu.edu (Postfix) with SMTP id 77F662F93AB; Tue, 8 Jun 2004 11:53:01 -0400 (EDT) Original-Received: from comp.lancs.ac.uk by email.esm.psu.edu with SMTP; Tue, 8 Jun 2004 11:52:13 -0400 Original-To: "TeX on Mac OS X Mailing List" , "Ntg Context" In-Reply-To: <83201.89697-yNUTs0qEFpZ/1wmUHrjjoYdd74u8MsAO@public.gmane.org> X-Mailer: CTM PowerMail version 5.0 English Precedence: List List-Software: LetterRip Pro 4.05b5 by LetterRip Software, LLC. List-Subscribe: List-Digest: List-Unsubscribe: X-LR-SENT-TO: outbound.engr.psu.edu Xref: main.gmane.org gmane.comp.tex.macosx:974 gmane.comp.tex.context:15347 X-Report-Spam: http://spam.gmane.org/gmane.comp.tex.context:15347 TeX on Mac OS X Mailing List said this at Mon, 7 Jun 2004 20:00:01 -0400: >Shell escape is a mechanism which basically stops TeX processing, allows >an external program (like epstopd script) to run and then resume the >processing. The problem is that it allows any program to be run. So if >someone sends you a malicious TeX file, it can do good amount of damage >like wipe your home folder. Hi MacOSX-TeXers and ConTeXters. I just happened to revisit this recently, wondering how to make the gwTeX/ConTeXt experience a bit more usable "out of the box". I remember a few months ago some ConTeXters suggesting on MacOSX-TeX that shell_escape be set to true, to make things easier for users. The security implications quashed that idea pretty quickly. Instead, how about if gwTeX's default texmf.tetex/context/config/ texexec.ini includes the line: for tetex set TeXPassString to -progname=context -shell-escape That ought to be as safe as any ConTeXt installation, without negatively impacting risk for other macro packages, right? (disclaimer: I don't run gwTeX on my main rig (TeXLive for me), but I try to keep an eye on what's going on over there. For whatever TeXLive-ish reason, my texexec.ini includes --default-translate-file=cp8bit on that line as well.) -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Adam T. Lindsay atl-Zrdc6muVEXhFdZ2Pf3w6Nw@public.gmane.org Computing Dept, Lancaster University +44(0)1524/594.537 Lancaster, LA1 4YR, UK Fax:+44(0)1524/593.608 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-