From 071beafdd0a335d8d1274d14c965deebf230841257075a906e8fdb7dc3fb92cd Mon Sep 17 00:00:00 2001
From: Petr Gajdos <pgajdos@suse.com>
Date: Thu, 21 Mar 2024 08:40:43 +0000
Subject: [PATCH] checkin

OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=714
---
 ImageMagick-configuration-SUSE.patch           | 18 ++++++++++++++----
 ...agick-library-installable-in-parallel.patch |  8 ++++----
 ImageMagick.changes                            |  8 ++++++++
 3 files changed, 26 insertions(+), 8 deletions(-)

diff --git a/ImageMagick-configuration-SUSE.patch b/ImageMagick-configuration-SUSE.patch
index a9f5ec5..12d918f 100644
--- a/ImageMagick-configuration-SUSE.patch
+++ b/ImageMagick-configuration-SUSE.patch
@@ -1,6 +1,17 @@
---- a/config/policy-secure.xml
-+++ b/config/policy-secure.xml
-@@ -92,8 +92,10 @@
+Index: ImageMagick-7.1.1-29/config/policy-secure.xml
+===================================================================
+--- ImageMagick-7.1.1-29.orig/config/policy-secure.xml
++++ ImageMagick-7.1.1-29/config/policy-secure.xml
+@@ -82,8 +82,6 @@
+   <policy domain="cache" name="synchronize" value="true"/>
+   <!-- Replace passphrase for secure distributed processing -->
+   <!-- <policy domain="cache" name="shared-secret" value="secret-passphrase" stealth="true"/> -->
+-  <!-- Do not permit any delegates to execute. -->
+-  <policy domain="delegate" rights="none" pattern="*"/>
+   <!-- Do not permit any image filters to load. -->
+   <policy domain="filter" rights="none" pattern="*"/>
+   <!-- Don't read/write from/to stdin/stdout. -->
+@@ -92,8 +90,10 @@
    <policy domain="path" rights="none" pattern="/etc/*"/>
    <!-- Indirect reads are not permitted. -->
    <policy domain="path" rights="none" pattern="@*"/>
@@ -12,4 +23,3 @@
    <!-- This policy sets the number of times to replace content of certain
         memory buffers and temporary files before they are freed or deleted. -->
    <policy domain="system" name="shred" value="1"/>
-
diff --git a/ImageMagick-library-installable-in-parallel.patch b/ImageMagick-library-installable-in-parallel.patch
index 46235e6..0eb826b 100644
--- a/ImageMagick-library-installable-in-parallel.patch
+++ b/ImageMagick-library-installable-in-parallel.patch
@@ -1,8 +1,8 @@
-Index: ImageMagick-7.1.1-23/configure
+Index: ImageMagick-7.1.1-29/configure
 ===================================================================
---- ImageMagick-7.1.1-23.orig/configure
-+++ ImageMagick-7.1.1-23/configure
-@@ -34846,7 +34846,9 @@ fi
+--- ImageMagick-7.1.1-29.orig/configure
++++ ImageMagick-7.1.1-29/configure
+@@ -34803,7 +34803,9 @@ fi
  
  
  # Subdirectory to place architecture-dependent configuration files
diff --git a/ImageMagick.changes b/ImageMagick.changes
index 3e20c29..7313cc7 100644
--- a/ImageMagick.changes
+++ b/ImageMagick.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Thu Mar 21 08:35:53 UTC 2024 - pgajdos@suse.com
+
+- allow delegates to be executed, was disabled by default policy
+- modified patches
+  % ImageMagick-configuration-SUSE.patch (refreshed)
+  % ImageMagick-library-installable-in-parallel.patch (refreshed)
+
 -------------------------------------------------------------------
 Mon Mar  4 11:55:33 UTC 2024 - pgajdos@suse.com