My texmf.cnf file contains these lines: % Allow TeX \openin, \openout, or \input on filenames starting with `.' % (e.g., .rhosts) or outside the current tree (e.g., /etc/passwd)? % a (any) : ...
I have just begun playing around with arara and I am curious if there are safety/security concerns. For example, pdflatex from TeX Live has shell escape disabled by default. If the TeX Live team think ...
I am a programmer and as part of a website I need to be able to take LaTeX source files and compile them, then return the pdf to the user. This seems dangerous since a malicious user could e.g. read ...
I have recently been asked to add a digital signature to a report (which I wrote using pdflatex). Is there such a mechanism in the TeX/LaTeX world or am I better of using external software to verify ...
We are using Acrobat digital signatures in my organization. With Acrobat Professional you can put in a signature block that allows signing with a client-side digital signature. This is something ...
How do CTAN maintainers make sure all the uploaded packages and classess in CTAN are free of malicious code?
There are a large number of packages (plus some classes) uploaded and updated in CTAN (other mirrors as well). How do the CTAN maintainers make sure the uploaded stuff is free of malicious code? Do ...
Is it possible to prevent users from seeing the package codes while they still can make use of its publicly exposed macros?
Assume that I have a confidential package that nobody is allowed to see the source code. The users are only allowed to use the public macros. This question is closely related to my other question. ...
Is it necessary to disable virus scanner during TeX Live installation, and if so, why?
TH. writes, in How should one use \write18 with BibTeX: Background Now that TeX Live 2010 has a restricted \write18, I figured it'd be reasonable to update my cv which uses the bibunits package ...
Background Users can provide text, which is transformed using XSL into a LaTeX document. The XSL template that transforms the XML document (containing user-defined text) currently resembles: ...
I'm using xetex 3.1415926-2.2-0.9995.2 (TeX Live 2009/Debian). I'm trying to run xelatex inside chroot jail. I've copied following binaries and directories: pdftex bibtex xdvipdfmx xelatex ...
Possible Duplicate: How can I safely compile other people's LaTeX documents? I've got a Linux server that is rendering LaTeX documents, I want to disable the access of LaTeX to system ...
I often work on Windows, so need to use MiKTeX. I recently found the minted package, which needs to call the external command pygmentize. I currently call xelatex with the -shell-escape option to ...