On Wed, May 06, 2026 at 07:47:14AM +0200, Jürgen Spitzmüller wrote: > Am Dienstag, dem 05.05.2026 um 21:53 +0200 schrieb Pavel Sanda: > > Second option is to directly edit /etc/ImageMagick-7/policy.xml (or > > at similar location) and allow only the delegates of interest (in > > lyx's case that's mainly eps/pdf). That's what I used to do when IM > > policies were more strict (at that time triggered actually by > > ghostscript vulnerabilities). > > I can do that, but for users this is not a satisfactory situation.
I am not sure I do have other satisfactory solution though. We have still place the machinery from the earlier case in configure.py, where we explicitely test whether IM delegate for eps conversion works and if not, we add new specific external convertor. The difference is that IIRC the eps->png chain banned earlier caused only problem for displaying stuff within LyX GUI - so if the new convertor produced slightly different result it was not big deal. I am way more concerned if we add different conversion chain for producing dvi/eps/pdf output which would contextually switch depending on the config of your machine. That would produce different outputs without much warnings. Pavel -- lyx-devel mailing list [email protected] https://lists.lyx.org/mailman/listinfo/lyx-devel
