19
edits
Changes
Jump to navigation
Jump to search
m
If you don't want ''Hint for MikTeX users:''' The counterpart to take this security risk with all TeX code on your system<tt>texmf.cnf</tt> was <tt>miktex.ini</tt>, you might like to consider the following change to now the appropriate line in config is [[texexechttp://docs.miktex.org/2.9/manual/runtimeparams.inihtml stored separately for each program]]:
<pre>== Location and priority of texmf.cnf files ==for Assuming that you have your distribution in /usr/local/texlive/2008, the following texmf.cnf files are read (in this order) if they exist: # /usr/local/texlive/2008/bin/x86_64-linux/texmf.cnf# tetex /usr/local/texlive/2008/bin/texmf.cnf# /usr/local/texlive/2008/texmf.cnf# /usr/local/texlive/2008/texmf/web2c/texmf.cnf Variables you set in a particular file are *not* overwritten by fileswhich are read later. The default is (4). TeXPassString If you have to customize texmf.cnf, the best thingyou can do is to put only the variables you want to change into (3). (1) is quite useful for system dependent configuration. Onmulti-progname=context -shell-escapeplatform installations you could create a file</pre>usr/local/texlive/2008/bin/win32/texmf.cnf on the server whichcontains the single line
(If yours is a non-tetex system, choose the appropriate line. If there are other options present, like <tt>--default-translate-file OSFONTDIR =cp8bit<$SystemRoot/tt>, then don't delete them!)Fonts
This will enable <tt>\write18</tt> support per <tt>texexec</tt> job, and not system-wide. An administrator would therefore this only have to worry about malicious ConTeXt code, and not about other TeX systems running. With the second modificationaffects Windows clients, you can leave even if (3) contains the <tt>shell_escape</tt> line in <tt>texmf.cnf</tt> commented out/false.
'''Hint for MikTeX users:''' The counterpart to <tt>texmf.cfg< OSFONTDIR = /tt> is <tt>miktex.ini<usr/tt>share/fonts.
Removed spam
Most options in <tt>texmf.cnf</tt> of modern TeX distributions are ok for ConTeXt (in former times you had to care for ConTeXt's huge memory needs yourself and occasionally set some additional paths). The one thing left:
ConTeXt likes TeX's "write18" function enabled to run [[MetapostMetaPost]] and some other tools in the background.
That's a potential security risk (malicious TeX code could run any program with your user rights), so it's off (false) by default.
</pre>
[[Category:Installation]]
