From: Akira Yokosawa <akiyks@gmail.com>
Date: Thu, 10 Feb 2022 01:26:53 +0000 (+0900)
Subject: docs: Makefile: Add -no-shell-escape option to LATEXOPTS
X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=6b22ce002f755e34e9a92ce5a41ffda0b729b892;p=linux.git

docs: Makefile: Add -no-shell-escape option to LATEXOPTS

It turns out that LaTeX enables \write18, which allows (some) shell
commands to be executed from the document source, by default.  This the
often-seen warning during a pdfdocs build:

  restricted \write18 enabled

That is a potential security problem and is entirely unnecessary; nothing
in the kernel PDF docs build needs that capability.  So disable \write18
explicitly.

Signed-off-by: Akira Yokosawa <akiyks@gmail.com>
Link: https://lore.kernel.org/r/519bd2d9-1bee-03e1-eeb4-d9883c18be0c@gmail.com
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
---

diff --git a/Documentation/Makefile b/Documentation/Makefile
index 9f4bd42cef189..64d44c1ecad31 100644
--- a/Documentation/Makefile
+++ b/Documentation/Makefile
@@ -26,7 +26,7 @@ SPHINX_CONF   = conf.py
 PAPER         =
 BUILDDIR      = $(obj)/output
 PDFLATEX      = xelatex
-LATEXOPTS     = -interaction=batchmode
+LATEXOPTS     = -interaction=batchmode -no-shell-escape
 
 ifeq ($(KBUILD_VERBOSE),0)
 SPHINXOPTS    += "-q"