Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.os.linux > #51573

Re: A problem with "convert" - security related

From Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt>
Newsgroups alt.os.linux, alt.os.linux.ubuntu
Subject Re: A problem with "convert" - security related
Date 2018-11-10 17:19 +0000
Organization Aioe.org NNTP Server
Message-ID <ps73u6$t0r$1@gioia.aioe.org> (permalink)
References <ps5g64$dqn$1@gioia.aioe.org> <ps657g$cn$1@dont-email.me>

Cross-posted to 2 groups.

Show all headers | View raw


Às 08:34 de 10/11/18, stepore escreveu:
> On 11/09/2018 06:35 PM, Paulo da Silva wrote:
> 
> 
> Don't remove the file, just change this bit:
> <policy domain="coder" rights="read | write" pattern="PDF" />

Yes, I know how to possibly fix it. I just removed that file to speed
things up for just a single command.
My problem is mainly to understand what are the risks of such utility
(convert) for having those restrictions in the policy file.
In particular, why is (or may be) it "dangerous" allowing write to pdf
files!
Knowing that I'll try a more definitive solution.

I'm assuming that the guy(s) who wrote those rules are not crazy :-)

Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-10 02:35 +0000
  Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 00:15 -0500
  Re: A problem with "convert" - security related stepore <linshine@here.now> - 2018-11-10 00:34 -0800
    Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 07:32 -0500
    Re: A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-10 17:19 +0000
      Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 17:03 -0500
        Re: A problem with "convert" - security related Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2018-11-11 02:45 +0000
          Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-10 23:26 -0500
            Re: A problem with "convert" - security related "Carlos E. R." <robin_listas@es.invalid> - 2018-11-12 14:17 +0100
              Re: A problem with "convert" - security related Paul <nospam@needed.invalid> - 2018-11-12 09:21 -0500
                Re: A problem with "convert" - security related "Carlos E. R." <robin_listas@es.invalid> - 2018-11-12 17:09 +0100

csiph-web