diff options
Diffstat (limited to 'media-gfx/imagemagick/files/policy-hardening.patch')
| -rw-r--r-- | media-gfx/imagemagick/files/policy-hardening.patch | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/media-gfx/imagemagick/files/policy-hardening.patch b/media-gfx/imagemagick/files/policy-hardening.patch new file mode 100644 index 000000000000..9bb8529d191a --- /dev/null +++ b/media-gfx/imagemagick/files/policy-hardening.patch @@ -0,0 +1,15 @@ +--- a/config/policy.xml ++++ b/config/policy.xml +@@ -52,6 +52,12 @@ + <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" /> + --> + <policymap> ++ <!-- https://www.kb.cert.org/vuls/id/332928 mitigation --> ++ <policy domain="coder" rights="none" pattern="PS" /> ++ <policy domain="coder" rights="none" pattern="EPS" /> ++ <policy domain="coder" rights="none" pattern="PDF" /> ++ <policy domain="coder" rights="none" pattern="XPS" /> ++ + <!-- <policy domain="system" name="shred" value="2"/> --> + <!-- <policy domain="system" name="precision" value="6"/> --> + <!-- <policy domain="system" name="memory-map" value="anonymous"/> --> |