clarify

Author: Cristy

docs/security-policy/index.html

@@ -301,7 +301,7 @@ <h2><a class="anchor" id="other"></a>Other Security Considerations</h2>
 
 <li>Disable potentially dangerous coders: If you are using ImageMagick on a public website, you may want to increase security by disabling certain coders such as MVG or HTTPS.</li>
 
-<li>Review <a href="/source/delegates.xml">delegates.xml</a> and disable by policy any that are not suitable in your environment.  For those that remain, ensure that every delegate command uses an <strong>absolute pathname</strong>, for example <code>/usr/bin/gs</code> instead of <code>gs</code>, so that delegate resolution is deterministic and not dependent on the environment’s <code>PATH</code>.</li>
+<li>Review <a href="/source/delegates.xml">delegates.xml</a> and disable by policy any that are not suitable in your environment.  For those that remain, use the <code>configure --with--frozenpaths=yes</code> to ensure that every delegate program uses an <strong>absolute pathname</strong>, for example <code>/usr/bin/gs</code> instead of <code>gs</code>, so that delegate resolution is deterministic and not dependent on the environment’s <code>PATH</code>.</li> 
 
 <li>Prevent execution of image filters and indirect reads: You can prevent users from executing image filters and performing indirect reads to increase security.</li>