Dear Sylvain, > OK, so as far as I understand, we'd better pass '-dSAFER -P-' to > 'ps2pdf' (which is AFAICS the only ghostscript script that's used in > page-crunch).
My lenny /usr/bin/ps2pdf (really /usr/bin/ps2pdfwr) already includes -dSAFER. Yes you could (should?) pass -P- to it. I expect that to be fixed in the Debian ghostscript, sometime, anyway. Or, you could run ps2pdf in a "safe" directory, chdir to "/" or some empty directory, as cups and gv do (or will do): http://bugs.debian.org/584002 http://bugs.debian.org/583316 to also be protected against some as-yet-unpatched (but hopefully upcoming) gs bugs. Hope this helps... Cheers, Paul Paul Szabo p...@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org