Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.os.linux > #51566
| From | Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> |
|---|---|
| Newsgroups | alt.os.linux, alt.os.linux.ubuntu |
| Subject | A problem with "convert" - security related |
| Date | 2018-11-10 02:35 +0000 |
| Organization | Aioe.org NNTP Server |
| Message-ID | <ps5g64$dqn$1@gioia.aioe.org> (permalink) |
Cross-posted to 2 groups.
Hello. Some times (not too frequently) I need to use a command like convert *.png foo.pdf. This converts a bunch of images into a pdf book. Last time I tried it, I got an error: convert-im6.q16: not authorized `foo.pdf' @ error/constitute.c/WriteImage/1037. I could see that this has to do with "restrictions" in the file /etc/ImageMagick-6/policy.xml Some line there seems to prevent writing to pdf files! (I am aware that I can comment that line). I just temporarily removed that file and successfully executed the command. What is the related security problem? After all this is a read/write command! BTW, in which risks do I incur just removing the file? Thanks Paulo
Back to alt.os.linux | Previous | Next — Next in thread | Find similar | Unroll thread
A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-10 02:35 +0000
Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 00:15 -0500
Re: A problem with "convert" - security related stepore <linshine@here.now> - 2018-11-10 00:34 -0800
Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 07:32 -0500
Re: A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-10 17:19 +0000
Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 17:03 -0500
Re: A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-11 02:45 +0000
Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 23:26 -0500
Re: A problem with "convert" - security related "Carlos E. R." <robin_listas@es.invalid> - 2018-11-12 14:17 +0100
Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-12 09:21 -0500
Re: A problem with "convert" - security related "Carlos E. R." <robin_listas@es.invalid> - 2018-11-12 17:09 +0100
csiph-web