2021-11-16 15:45:43 +00:00
|
|
|
<policymap>
|
|
|
|
|
<policy domain="resource" name="memory" value="256MiB" />
|
|
|
|
|
<policy domain="resource" name="list-length" value="128" />
|
|
|
|
|
<policy domain="resource" name="width" value="10KP" />
|
|
|
|
|
<policy domain="resource" name="height" value="10KP" />
|
|
|
|
|
<policy domain="resource" name="map" value="512MiB" />
|
|
|
|
|
<policy domain="resource" name="area" value="40MP" />
|
|
|
|
|
<policy domain="resource" name="disk" value="1GiB" />
|
|
|
|
|
<policy domain="resource" name="file" value="768" />
|
|
|
|
|
<policy domain="resource" name="thread" value="2" />
|
2022-03-27 01:45:12 +00:00
|
|
|
<policy domain="path" rights="none" pattern="@*" />
|
2021-11-16 15:45:43 +00:00
|
|
|
<policy domain="coder" rights="none" pattern="*" />
|
|
|
|
|
<policy domain="coder" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP,MP4,TMP,PAM}" />
|
2022-03-27 01:45:12 +00:00
|
|
|
<policy domain="delegate" rights="none" pattern="*" />
|
|
|
|
|
<policy domain="delegate" rights="execute" pattern="ffmpeg" />
|
2021-11-16 15:45:43 +00:00
|
|
|
<policy domain="filter" rights="none" pattern="*" />
|
|
|
|
|
<policy domain="module" rights="none" pattern="*" />
|
2022-03-27 01:45:12 +00:00
|
|
|
<policy domain="module" rights="read | write" pattern="{GIF,JPEG,PNG,WEBP,TMP,PAM,VIDEO}" />
|
2021-11-16 15:45:43 +00:00
|
|
|
<!-- indirect reads not permitted -->
|
|
|
|
|
<policy domain="system" name="precision" value="6" />
|
|
|
|
|
</policymap>
|
