policy.xml and Apache/mod_php
Posted: 2016-05-03T17:25:25-07:00
Hello,
I've seen that the suggested workaround for the recent holes in ImageMagick is to set up a policy.xml as described in the announcement. To verify, users are instructed to use convert(1) on the CLI.
Does this policy configuration apply to php5-imagick (PHP ImageMagick extension) as well?
My specific setup is Apache + mod_php + php5-imagick. I've tried looking in phpinfo() output but there's nothing useful -- policies aren't listed.
Thanks for the help.
I've seen that the suggested workaround for the recent holes in ImageMagick is to set up a policy.xml as described in the announcement. To verify, users are instructed to use convert(1) on the CLI.
Does this policy configuration apply to php5-imagick (PHP ImageMagick extension) as well?
My specific setup is Apache + mod_php + php5-imagick. I've tried looking in phpinfo() output but there's nothing useful -- policies aren't listed.
Thanks for the help.