config.patch

   1 --- ImageMagick-6.9.12-44/config/policy.xml.orig        2022-04-12 19:26:30.564436640 +0200
   2 +++ ImageMagick-6.9.12-44/config/policy.xml     2022-04-12 19:39:15.813624263 +0200
   3 @@ -68,10 +68,7 @@
   4    <!-- <policy domain="resource" name="thread" value="4"/> -->
   5    <!-- <policy domain="resource" name="throttle" value="0"/> -->
   6    <!-- <policy domain="resource" name="time" value="3600"/> -->
   7 -  <!-- <policy domain="coder" rights="none" pattern="MVG" /> -->
   8    <!-- <policy domain="module" rights="none" pattern="{PS,PDF,XPS}" /> -->
   9 -  <!-- <policy domain="delegate" rights="none" pattern="HTTPS" /> -->
  10 -  <!-- <policy domain="path" rights="none" pattern="@*" /> -->
  11    <!-- <policy domain="cache" name="memory-map" value="anonymous"/> -->
  12    <!-- <policy domain="cache" name="synchronize" value="True"/> -->
  13    <!-- <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/> -->
  14 @@ -79,4 +76,18 @@
  15    <!-- <policy domain="system" name="shred" value="2"/> -->
  16    <!-- <policy domain="system" name="precision" value="6"/> -->
  17    <!-- <policy domain="system" name="font" value="/path/to/font.ttf"/> -->
  18 +  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
  19 +  <policy domain="coder" rights="none" pattern="URL" />
  20 +  <policy domain="coder" rights="none" pattern="HTTPS" />
  21 +  <policy domain="delegate" rights="none" pattern="HTTPS" />
  22 +  <policy domain="coder" rights="none" pattern="HTTP" />
  23 +  <policy domain="coder" rights="none" pattern="FTP" />
  24 +  <policy domain="coder" rights="none" pattern="MVG" />
  25 +  <policy domain="coder" rights="none" pattern="MSL" />
  26 +  <policy domain="coder" rights="none" pattern="TEXT" />
  27 +  <policy domain="coder" rights="none" pattern="SHOW" />
  28 +  <policy domain="coder" rights="none" pattern="WIN" />
  29 +  <policy domain="coder" rights="none" pattern="PLT" />
  30 +  <policy domain="path" rights="none" pattern="|*"/>
  31 +  <policy domain="path" rights="none" pattern="@*"/>  <!-- indirect reads not permitted -->
  32  </policymap>