19
edits
Changes
Jump to navigation
Jump to search
m
If you don't want ''Hint for MikTeX users:''' The counterpart to take this security risk with all TeX code on your system<tt>texmf.cnf</tt> was <tt>miktex.ini</tt>, you might like to consider the following change to now the appropriate line in config is [[texexechttp://docs.miktex.org/2.9/manual/runtimeparams.inihtml stored separately for each program]]:
<pre>== Location and priority of texmf.cnf files == Assuming that you have your distribution in /usr/local/texlive/2008, the following texmf.cnf files are read (in this order) if they exist: # /usr/local/texlive/2008/bin/x86_64-linux/texmf.cnf# /usr/local/texlive/2008/bin/texmf.cnffor # tetex /usr/local/texlive/2008/texmf.cnf# /usr/local/texlive/2008/texmf/web2c/texmf.cnf Variables you set in a particular file are *not* overwritten by fileswhich are read later. The default is (4). TeXPassString If you have to customize texmf.cnf, the best thingyou can do is to put only the variables you want to change into (3). (1) is quite useful for system dependent configuration. Onmulti-prognameplatform installations you could create a file/usr/local/texlive/2008/bin/win32/texmf.cnf on the server whichcontains the single line OSFONTDIR =context -shell-escape$SystemRoot/Fonts </pre>and this only affects Windows clients, even if (3) contains the line
(If yours is a non-tetex system, choose the appropriate line. If there are other options present, like <tt>--default-translate-file OSFONTDIR =cp8bit</tt>, then don't delete them!)usr/share/fonts.
This will enable <tt>\write18</tt> support per <tt>texexec</tt> job, and not system-wide. An administrator would therefore only have to worry about malicious ConTeXt code, and not about other TeX systems running. With the second modification, you can leave the <tt>shell_escape</tt> line in <tt>texmf.cnf</tt> commented out/false.[[Category:Installation]]
Removed spam
Most options in <tt>texmf.cnf</tt> of modern TeX distributions are ok for ConTeXt (in former times you had to care for ConTeXt's huge memory needs yourself and occasionally set some additional paths). The one thing left:
ConTeXt likes TeX's "write18" function enabled to run [[MetapostMetaPost]] and some other tools in the background.
That's a potential security risk (malicious TeX code could run any program with your user rights), so it's off (false) by default.
</pre>
