config.patch

   1 --- ImageMagick-6.9.12-82/config/policy.xml.orig        2023-03-18 14:46:51.000000000 +0100
   2 +++ ImageMagick-6.9.12-82/config/policy.xml     2023-03-25 21:28:56.085229316 +0100
   3 @@ -68,10 +68,7 @@
   4    <!-- <policy domain="resource" name="thread" value="4"/> -->
   5    <!-- <policy domain="resource" name="throttle" value="0"/> -->
   6    <!-- <policy domain="resource" name="time" value="3600"/> -->
   7 -  <!-- <policy domain="coder" rights="none" pattern="MVG" /> -->
   8    <!-- <policy domain="module" rights="none" pattern="{PS,PDF,XPS}" /> -->
   9 -  <!-- <policy domain="delegate" rights="none" pattern="HTTPS" /> -->
  10 -  <!-- <policy domain="path" rights="none" pattern="@*" /> -->
  11    <!-- <policy domain="cache" name="memory-map" value="anonymous"/> -->
  12    <!-- <policy domain="cache" name="synchronize" value="True"/> -->
  13    <!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> -->
  14 @@ -79,5 +76,19 @@
  15    <!-- <policy domain="system" name="max-memory-request" value="256MiB"/> -->
  16    <!-- <policy domain="system" name="shred" value="1"/> -->
  17    <!-- <policy domain="system" name="font" value="/path/to/unicode-font.ttf"/> -->
  18 +  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
  19 +  <policy domain="coder" rights="none" pattern="URL" />
  20 +  <policy domain="coder" rights="none" pattern="HTTPS" />
  21 +  <policy domain="delegate" rights="none" pattern="HTTPS" />
  22 +  <policy domain="coder" rights="none" pattern="HTTP" />
  23 +  <policy domain="coder" rights="none" pattern="FTP" />
  24 +  <policy domain="coder" rights="none" pattern="MVG" />
  25 +  <policy domain="coder" rights="none" pattern="MSL" />
  26 +  <policy domain="coder" rights="none" pattern="TEXT" />
  27 +  <policy domain="coder" rights="none" pattern="SHOW" />
  28 +  <policy domain="coder" rights="none" pattern="WIN" />
  29 +  <policy domain="coder" rights="none" pattern="PLT" />
  30 +  <policy domain="path" rights="none" pattern="|*"/>
  31 +  <policy domain="path" rights="none" pattern="@*"/>  <!-- indirect reads not permitted -->
  32    <policy domain="Undefined" rights="none"/>
  33  </policymap>