bug-lilypond
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Pango & jailing


From: Han-Wen Nienhuys
Subject: Re: Pango & jailing
Date: Fri, 17 Jun 2005 18:25:21 +0200
User-agent: Mozilla Thunderbird 1.0.2-6 (X11/20050513)

Sebastiano Vigna wrote:

ARGV0_RELOCATION was not needed, but I had to remove the noexec from the
mount, which makes the cage less secure (albeit still reasonably
secure).

Hmm. you can create arbitrary binaries using GUILE, so any local exploit is promoted to remote automatically.

Another option is to compile pango statically, and link it statically.

I have no time to find another solution now. In any case, the
manual must be updated, as there are things that should be copied that
it doesn't mention presently, and noexec must be eliminated.

Some time ago I think you mentioned that --png was all that was needed
to get snippet compiled. But unfortunately it doesn't.

Presently, in fact, I cannot compile at all snippets with the ps
backend:

So I'm completely stuck at this point. I cannot compile snippets (even
snippets from the manual), and apparently there is no way to get an EPS
file "cut around" the output (as I used to do using dvips). There is an
--eps option in the manual (Section 5.2), but it is missing from the
program help and in fact it doesn't work.


2.5 uses the eps backend (based on the ps backend),

 lilypond -b eps

which dumps separate systems as eps files without fonts, and complete scores as EPS files with fonts.

They need a bit of magic, which is above the

  %%% start cut & pastable section %%%

marker over the .ly snippets when you take them from the manual directly

--
 Han-Wen Nienhuys - address@hidden - http://www.xs4all.nl/~hanwen




reply via email to

[Prev in Thread] Current Thread [Next in Thread]