Petr Gajdos 2024-03-21 08:40:43 +00:00 committed by Git OBS Bridge
parent c427e95edf
commit 071beafdd0
3 changed files with 26 additions and 8 deletions

View File

@ -1,6 +1,17 @@
--- a/config/policy-secure.xml
+++ b/config/policy-secure.xml
@@ -92,8 +92,10 @@
Index: ImageMagick-7.1.1-29/config/policy-secure.xml
===================================================================
--- ImageMagick-7.1.1-29.orig/config/policy-secure.xml
+++ ImageMagick-7.1.1-29/config/policy-secure.xml
@@ -82,8 +82,6 @@
<policy domain="cache" name="synchronize" value="true"/>
<!-- Replace passphrase for secure distributed processing -->
<!-- <policy domain="cache" name="shared-secret" value="secret-passphrase" stealth="true"/> -->
- <!-- Do not permit any delegates to execute. -->
- <policy domain="delegate" rights="none" pattern="*"/>
<!-- Do not permit any image filters to load. -->
<policy domain="filter" rights="none" pattern="*"/>
<!-- Don't read/write from/to stdin/stdout. -->
@@ -92,8 +90,10 @@
<policy domain="path" rights="none" pattern="/etc/*"/>
<!-- Indirect reads are not permitted. -->
<policy domain="path" rights="none" pattern="@*"/>
@ -12,4 +23,3 @@
<!-- This policy sets the number of times to replace content of certain
memory buffers and temporary files before they are freed or deleted. -->
<policy domain="system" name="shred" value="1"/>

View File

@ -1,8 +1,8 @@
Index: ImageMagick-7.1.1-23/configure
Index: ImageMagick-7.1.1-29/configure
===================================================================
--- ImageMagick-7.1.1-23.orig/configure
+++ ImageMagick-7.1.1-23/configure
@@ -34846,7 +34846,9 @@ fi
--- ImageMagick-7.1.1-29.orig/configure
+++ ImageMagick-7.1.1-29/configure
@@ -34803,7 +34803,9 @@ fi
# Subdirectory to place architecture-dependent configuration files

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Thu Mar 21 08:35:53 UTC 2024 - pgajdos@suse.com
- allow delegates to be executed, was disabled by default policy
- modified patches
% ImageMagick-configuration-SUSE.patch (refreshed)
% ImageMagick-library-installable-in-parallel.patch (refreshed)
-------------------------------------------------------------------
Mon Mar 4 11:55:33 UTC 2024 - pgajdos@suse.com