ImageMagick security policy PDF blocking conversion

Question

The Imagemagick security policy seems to be not allowing me perform this conversion from pdf to png  Converting other extensions seem to be working  just not from pdf  I haven t changed any of the imagemagick settings since I installed it    I am using Arch Linux  if the OS matters   user machine   convert -density 300 -depth 8 -quality 90 input pdf output png convert  attempt to perform an operation not allowed by the security policy  PDF    error constitute c IsCoderAuthorized 408  convert  no images defined  output png    error convert c ConvertImageCommand 3288

User · Answer

As pointed out in some comments  you need to edit the policies of ImageMagick in  etc ImageMagick-7 policy xml  More particularly  in ArchLinux at the time of writing  05 01 2019  the following line is uncommented    lt policy domain  coder  rights  none  pattern   PS PS2 PS3 EPS PDF XPS     gt    Just wrap it between  lt  -- and -- gt  to comment it  and pdf conversion should work again

User · Answer

On Ubuntu 19 10  I have done this in  etc ImageMagick-6 policy xml  uncomment this   lt policy domain  module  rights  read   write  pattern   PS PDF XPS     gt    and comment this   lt  --  lt policy domain  coder  rights  none  pattern  PDF    gt  -- gt    After that  this command work without error   convert -thumbnail x300 -background white -alpha remove sample pdf sample png

User · Answer

Adding to Stefan Seidel s answer  Well  at least in Ubuntu 20 04 2 LTS or maybe in other versions you can t really edit the policy xml file directly in a GUI way  Here is a terminal way to edit it   Open the policy xml file in terminal by entering this command - sudo nano  etc ImageMagick-6 policy xml  Now  directly edit the file in terminal  find  lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PDF quot    gt  and replace none with read write as shown in the picture  Then press Ctrl X to exit

User · Answer

For me on my archlinux system the line  was already uncommented  I had to replace  none  by  read   write   to make it work

User · Answer

This is due to a security vulnerability that has been addressed in Ghostscript 9 24  source   If you have a newer version  you don t need this workaround anymore  On Ubuntu 19 10 with Ghostscript 6  this means   Make sure you have Ghostscript  9 24  gs --version   If yes  just remove this whole following section from  etc ImageMagick-6 policy xml   lt  -- disable ghostscript format types -- gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS quot    gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS2 quot    gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS3 quot    gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot EPS quot    gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PDF quot    gt   lt policy domain  quot coder quot  rights  quot none quot  pattern  quot XPS quot    gt

User · Answer

Works in Ubuntu 20 04 Add this line inside  lt policymap gt   lt policy domain  quot module quot  rights  quot read write quot  pattern  quot  PS PDF XPS  quot    gt   Comment these lines     lt  --    lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS quot    gt     lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS2 quot    gt     lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PS3 quot    gt     lt policy domain  quot coder quot  rights  quot none quot  pattern  quot EPS quot    gt     lt policy domain  quot coder quot  rights  quot none quot  pattern  quot PDF quot    gt     lt policy domain  quot coder quot  rights  quot none quot  pattern  quot XPS quot    gt     -- gt

User · Answer

For me on Arch Linux  I had to comment this     lt policy domain  quot delegate quot  rights  quot none quot  pattern  quot gs quot    gt

User · Answer

Alternatively you can use img2pdf to convert images to pdf  Install it on Debian or Ubuntu with  sudo apt install img2pdf  Convert one or more images to pdf  img2pdf img jpg -o output pdf  It uses a different mechanism than imagemagick to embed the image into the pdf  When possible Img2pdf embeds the image directly into the pdf  without decoding and recoding the image

User · Answer

I was experiencing this issue with nextcloud which would fail to create thumbnails for pdf files   However  none of the suggested steps would solve the issue for me    Eventually I found the reason  The accepted answer did work but I had to also restart php-fpm after editing the policy xml file    sudo systemctl restart php7 2-fpm service

User · Answer

Well  I added     lt policy domain  coder  rights  read   write  pattern  PDF    gt    just before  lt  policymap gt  in  etc ImageMagick-7 policy xml and that makes it work again  but not sure about the security implications of that

[pdf] ImageMagick security policy 'PDF' blocking conversion

Examples related to pdf

Examples related to imagemagick

Examples related to imagemagick-convert