mirror of
https://github.com/YunoHost-Apps/paperless-ngx_ynh.git
synced 2024-09-03 19:56:33 +02:00
24 lines
1.4 KiB
XML
24 lines
1.4 KiB
XML
|
<policymap>
|
||
|
|
<!-- temporary path must be a preexisting writable directory -->
|
||
|
|
<policy domain="resource" name="temporary-path" value="__DATA_DIR__/imagemagick"/>
|
||
|
|
<policy domain="resource" name="memory" value="256MiB"/>
|
||
|
|
<policy domain="resource" name="list-length" value="32"/>
|
||
|
|
<policy domain="resource" name="width" value="8KP"/>
|
||
|
|
<policy domain="resource" name="height" value="8KP"/>
|
||
|
|
<policy domain="resource" name="map" value="512MiB"/>
|
||
|
|
<policy domain="resource" name="area" value="16KP"/>
|
||
|
|
<policy domain="resource" name="disk" value="1GiB"/>
|
||
|
|
<policy domain="resource" name="file" value="768"/>
|
||
|
|
<policy domain="resource" name="thread" value="2"/>
|
||
|
|
<policy domain="resource" name="time" value="120"/>
|
||
|
|
<policy domain="module" rights="none" pattern="URL" />
|
||
|
|
<policy domain="coder" rights="read | write" pattern="{MSVG,MVG,PS,PDF,RSVG,SVG,XPS}" />
|
||
|
|
<policy domain="filter" rights="none" pattern="*" />
|
||
|
|
<policy domain="path" rights="none" pattern="-"/> <!-- don't read/write from/to stdin/stdout -->
|
||
|
|
<policy domain="path" rights="none" pattern="/etc/*"/> <!-- don't read sensitive paths -->
|
||
|
|
<policy domain="path" rights="none" pattern="@*"/> <!-- indirect reads not permitted -->
|
||
|
|
<policy domain="cache" name="memory-map" value="anonymous"/>
|
||
|
|
<policy domain="cache" name="synchronize" value="true"/>
|
||
|
|
<policy domain="system" name="shred" value="1"/>
|
||
|
|
</policymap>
|