Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

attempt to perform an operation not allowed by the security policy `PDF' #44

Open
a4i opened this issue Oct 31, 2020 · 0 comments
Open

Comments

@a4i
Copy link

a4i commented Oct 31, 2020

Running a 10.10 nuxeo instance with this docker image, I get this exception :

nuxeo_1          | Caused by: org.nuxeo.ecm.platform.commandline.executor.api.CommandException: Error code 1 return by command: convert -define registry:temporary-path=#{nuxeo.tmp.dir} -quiet -strip -thumbnail #{size} -background transparent -gravity center -format png -quality 75 #{inputFilePath}[0] #{outputFilePath}
nuxeo_1          | convert-im6.q16: attempt to perform an operation not allowed by the security policy `PDF' @ error/constitute.c/IsCoderAuthorized/408.
nuxeo_1          |   convert-im6.q16: no images defined `/opt/nuxeo/server/tmp/nxblob-1914293338314100812.png' @ error/convert.c/ConvertImageCommand/3258.

nuxeo_1          | 2020-10-25T09:38:20,106 WARN  [ThumbnailDocumentFactory] Cannot compute document thumbnail
nuxeo_1          | org.nuxeo.ecm.core.convert.api.ConversionException: Thumbnail conversion failed
nuxeo_1          | 	at org.nuxeo.ecm.platform.thumbnail.converter.ThumbnailDocumentConverter.convert(ThumbnailDocumentConverter.java:88) ~[nuxeo-thumbnail-10.10-HF18.jar:?]

I had to modify /etc/ImageMagick-6/policy.xml in the docker image this way, to have Nuxeo compute his thumbnails :

    <policy domain="coder" rights="none" pattern="XPS" />
+   <policy domain="coder" rights="read | write" pattern="PDF" />
  </policymap>

regards

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant