discuss: DocBook 4.x XML packages for RedHat?
Subject:
Re: DocBook 4.x XML packages for RedHat?
From:
Mark Komarinski ####@####.####
Date:
31 Mar 2001 02:04:27 -0000
Message-Id: <3AC53B1C.64AB0084@valinux.com>
Jorge Godoy wrote:
>
> On Fri, 30 Mar 2001, ####@####.#### wrote:
> >
> > The reason I went for Debian is that the DTDs for XML and SGML are
> > already packaged. apt-get update will keep them all fresh instead
> > of me looking for packages.
>
> <marketing>
> If you use Conectiva Linux, you can keep using RPM and RH style
> packages and benefit from apt (i.e. apt-get) to keep your system
> updated :-))
>
> We also have DTDs, stylesheets, etc. packaged. ;-))
> </marketing>
New DocBook tag? :)
> > I haven't looked at the security of this, as I'm not sure if system
> > calls can be placed in SGML code and let someone run arbitrary code.
> > If you'd like the code, I can send it to you for review.
>
> Hmmm... I think it's possible.
> Something like
>
> <!ENTITY date SYSTEM "| date">
>
> if it works, it should print the output of 'date'.
Doesn't look like it...
mkomarinski@clint:~$ jade -t sgml -i html -V nochunks -d public_html/ldp.dsl\#html /usr/lib/sgml/declaration/xml.dcl event-howto.xml >
event-howto.html
jade:event-howto.xml:68:5:E: cannot find "| date"; tried "| date", "/usr/local/share/sgml/| date", "/usr/local/lib/sgml/| date", "/usr/lib/sgml/|
date"
mkomarinski@clint:~$
> > Longer term, I'd like to support multiple files and images, but I
> > have to figure out how I want to do that.
>
> Why not with entities, as of:
>
> <!ENTITY file2 SYSTEM "file2.sgml"> ?
That I knew. What I want to do is find an easy way to upload them to
the web site. A tar.gz file would work, but again, that could have a
hidden payload (arbitrary .php files hidden in there).
I might build a chroot environment just in case...
-Mark
--
Mark Komarinski - Senior Systems Engineer - VA Linux Systems
(cell) 978-697-2228
(email) ####@####.####
"Have one day pleasant" - Babelfish
