29 Aug
2019
29 Aug
'19
05:50
Hi, there is now a new package called gswrap which if installed will replace with the LATEST[1] ghostscript package the /usr/bin/gs program with its script. The script uses bwrap from the bubblewrap package to have an own namespace for each ghostscript command. The aim is to be sure that even if ghostscript is used with an bad PostScript[tm] file there is no way to read files from the user nor from the system. [1] The update-alternatives utility is used now to have /usr/bin/gs as symbolic pointing to /usr/bin/gs.bin and if package gswrap becomes installed to the /usr/bin/gswrap script. Werner -- "Having a smoking section in a restaurant is like having a peeing section in a swimming pool." -- Edward Burr