Arch Linux

charlie

Member

Registered: 2013-09-18

Posts: 57

Is it safe to disable some policy in ImageMagick-7? [SOLVED]

In the file:  /etc/ImageMagick-7/policy.xml
I'd like to remove/comment the line:

<policy domain="delegate" rights="none" pattern="gs" />

because of https://stackoverflow.com/questions/529 … conversion.

Is it safe/ok/fine?

Last edited by charlie (2020-04-06 10:23:35)

eschwartz

Fellow

Registered: 2014-08-08

Posts: 4,097

Re: Is it safe to disable some policy in ImageMagick-7? [SOLVED]

Well, it is recommended to disable this due to ghostscript having repeatedly having tons of vulnerabilities. This is a proactive-by-default security setting, but you can relax that if you want. It depends on what sort of PDFs you expect to process, and whether any of them came from untrusted sources...

---

Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

charlie

Member

Registered: 2013-09-18

Posts: 57

Re: Is it safe to disable some policy in ImageMagick-7? [SOLVED]

Thanks! I've commented the line, used the command I needed then changed the line back to its original state, that was the best compromise I've found.

Last edited by charlie (2020-04-06 10:24:20)