Mailinglist Archive: opensuse-factory (331 mails)

< Previous Next >
[opensuse-factory] New package gswrap to have ghostscript within a container

there is now a new package called gswrap which if installed will
replace with the LATEST[1] ghostscript package the /usr/bin/gs program
with its script. The script uses bwrap from the bubblewrap package
to have an own namespace for each ghostscript command.

The aim is to be sure that even if ghostscript is used with an bad
PostScript[tm] file there is no way to read files from the user nor
from the system.

[1] The update-alternatives utility is used now to have /usr/bin/gs
as symbolic pointing to /usr/bin/gs.bin and if package gswrap becomes
installed to the /usr/bin/gswrap script.


"Having a smoking section in a restaurant is like having
a peeing section in a swimming pool." -- Edward Burr
< Previous Next >
Follow Ups