lilypond-book safe mode

[Julien Rioux]

Dear list,

This is a feature request for a safe mode for lilypond-book.

One can run lilypond with the -dsafe switch to avoid a security risk 
when compiling .ly files including evil scheme code. There is no 
equivalent switch for lilypond-book, and using --process leads to errors.

I'll post below a simple example.

Thanks,
Julien

---------------------------
$ cat docu.lytex
\documentclass{article}
\begin{document}
\begin{lilypond}
{c' d' e'}
\end{lilypond}
\end{document}

$ lilypond-book --process="lilypond -dsafe -dbackend=eps" docu.lytex
lilypond-book (GNU LilyPond) 2.12.3
Reading docu.lytex...
Running latex...This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 
2009/Debian)
 restricted \write18 enabled.
entering extended mode
(/tmp/tmpgwVO1K.tex
LaTeX2e <2009/09/24>
Babel <v3.8l> and hyphenation patterns for english, usenglishmax, 
dumylang, noh
yphenation, french, basque, ngerman, german, german-x-2009-06-19, 
ngerman-x-200
9-06-19, ukenglish, loaded.

(/usr/share/texmf-texlive/tex/latex/base/article.cls
Document Class: article 2007/10/19 v1.4h Standard LaTeX document class
(/usr/share/texmf-texlive/tex/latex/base/size10.clo))
No file tmpgwVO1K.aux.
textwidth=345.0pt
columnsep=10.0pt
(./tmpgwVO1K.aux) )
No pages of output.
Transcript written on tmpgwVO1K.log.
Dissecting...
Writing snippets...
Processing...
Running lilypond...GNU LilyPond 2.12.3
Processing `/scratch/examples/Test/snippet-map--1168004333.ly'
Parsing...
/scratch/examples/Test/snippet-map--1168004333.ly:4:1: error: GUILE 
signaled an error for the expression beginning here
#
 (ly:add-file-name-alist '(("d6/lily-79fd5fcc.ly" . "docu.lytex")
Unbound variable: ly:add-file-name-alist
/scratch/examples/Test/snippet-map--1168004333.ly:0: warning: no 
\version statement found, please add

\version "2.12.3"

for future compatibility
Processing `/scratch/examples/Test/d6/lily-79fd5fcc.ly'
Parsing...
/scratch/examples/Test/d6/lily-79fd5fcc.ly:3:9: error: include files are 
not allowed in safe mode
\include
         "lilypond-book-preamble.ly"
/scratch/examples/Test/d6/lily-79fd5fcc.ly:13:3: error: GUILE signaled 
an error for the expression beginning here
  #
   (define dump-extents #t)
Wrong type argument in position 1: #<srcprops ((breakpoint . #f) (line . 
40) (column . 7) (filename . 
"/usr/share/lilypond/2.12.3/ly/music-functions-init.ly"))>
/scratch/examples/Test/d6/lily-79fd5fcc.ly:17:22: error: GUILE signaled 
an error for the expression beginning here
  force-assignment = #
                      ""
Wrong type argument in position 1: #<srcprops ((breakpoint . #f) (line . 
40) (column . 7) (filename . 
"/usr/share/lilypond/2.12.3/ly/music-functions-init.ly"))>
/scratch/examples/Test/d6/lily-79fd5fcc.ly:18:16: error: GUILE signaled 
an error for the expression beginning here
  line-width = #
                (- line-width (* mm  3.000000))
Wrong type argument in position 1: #<srcprops ((breakpoint . #f) (line . 
40) (column . 7) (filename . 
"/usr/share/lilypond/2.12.3/ly/music-functions-init.ly"))>
/scratch/examples/Test/d6/lily-79fd5fcc.ly:0: warning: no \version 
statement found, please add

\version "2.12.3"

for future compatibility
Interpreting music...
Preprocessing graphical 
objects.../usr/share/lilypond/2.12.3/scm/titling.scm:9:34: In procedure 
ly:paper-get-number in expression (ly:paper-get-number layout (quote 
line-width)):
/usr/share/lilypond/2.12.3/scm/titling.scm:9:34: Wrong type (expecting 
real number): #<unspecified>
command failed: lilypond -dsafe -dbackend=eps -I 
"/scratch/examples/Test" --formats=eps  -deps-box-padding=3.000000 
-dread-file-list -dno-strip-output-dir 
"/scratch/examples/Test/snippet-names--1168004333.ly"
Child returned 1