From b5ef32a9a6a99e134e669b702e89a55fbabf5306 Mon Sep 17 00:00:00 2001
From: Hans Hagen <pragma@wxs.nl>
Date: Sun, 19 Feb 2017 17:46:26 +0100
Subject: 2017-02-19 17:20:00

---
 web2c/contextcnf.lua | 42 +++++++++++++++++++++++++++++-------------
 web2c/readme.txt     |  5 +++++
 2 files changed, 34 insertions(+), 13 deletions(-)
 create mode 100644 web2c/readme.txt

(limited to 'web2c')

diff --git a/web2c/contextcnf.lua b/web2c/contextcnf.lua
index a2025e6ef..cd948c23e 100644
--- a/web2c/contextcnf.lua
+++ b/web2c/contextcnf.lua
@@ -144,8 +144,8 @@ return {
             ["luatex.maxprintline"]      = " 10000", --    79
             ["luatex.maxstrings"]        = "500000", -- 15000 -- obsolete
             ["luatex.paramsize"]         =  "25000", --    60
-            ["luatex.savesize"]          =  "50000", --  4000
-            ["luatex.stacksize"]         =  "10000", --   300
+            ["luatex.savesize"]          = "100000", --  4000
+            ["luatex.stacksize"]         = "100000", --   300
 
             -- A few process related variables come next.
 
@@ -155,17 +155,33 @@ return {
             ["system.compile.cleanup"]   = "no",    -- remove tma files
             ["system.compile.strip"]     = "yes",   -- strip tmc files
 
-            -- The io modes are similar to the traditional ones. Possible values
-            -- are all, paranoid and restricted.
-
-         -- ["system.outputmode"]        = "restricted",
-         -- ["system.inputmode"]         = "any",
-
-            -- The following variable is under consideration. We do have protection
-            -- mechanims but it's not enabled by default.
-
-            ["system.commandmode"]       = "any", -- any none list
-            ["system.commandlist"]       = "mtxrun, convert, inkscape, gs, imagemagick, curl, bibtex, pstoedit",
+            -- sandboxing (these only kick in when --sandbox is given) .. the examples
+            -- below are just that, examples, as sandboxing is off by default ... when
+            -- turned on, restrictions kick in, and programs registered at runtime have
+            -- (even) more restrictions than already registered ones
+
+         -- ["system.rootlist"]          = { "/data" }, -- { { "/data", "read" }, ... }
+         --
+         -- ["system.executionmode"]     = "list", -- none | list | all
+         -- ["system.executionlist"]     = {
+         --     "context",
+         --     "bibtex", "mlbibcontext",
+         --     "curl",
+         --     "gswin64c", "gswin32c", "gs",
+         --     "gm", "graphicmagick", "imagemagick",
+         --     "pdftops",
+         --     "pstoedit",
+         --     "inkscape",
+         --     "woff2_decompress",
+         --     "hb-shape",
+         -- },
+         --
+         -- ["system.librarymode"]       = "list", -- none | list | all
+         -- ["system.librarylist"]       = {
+         --     "mysql",
+         --     "sqlite3",
+         --     "libharfbuzz", "libharfbuzz-0",
+         -- }
 
             -- The mplib library support mechanisms have their own
             -- configuration. Normally these variables can be left as
diff --git a/web2c/readme.txt b/web2c/readme.txt
new file mode 100644
index 000000000..1f19746c0
--- /dev/null
+++ b/web2c/readme.txt
@@ -0,0 +1,5 @@
+In order for context and its tools to be able to locate files in the tds
+compliant tree you need to copy 'contextcnf.lua' to 'texmfcnf.lua'. There
+is a fallback to 'contextcnf.lua' when no 'texmfcnf.lua' is found. You can
+have multiple 'texmfcnf.lua' files which means that you can overload global
+settings.
-- 
cgit v1.2.3