roxen.lists.pike.general

Subject Author Date
Re: More questions: timed thread IPC & Sandboxing Martin Bähr <mbaehr[at]email[dot]archlab[dot]tuwien[dot]ac> 25-01-2009
On Sat, Jan 24, 2009 at 09:41:48PM -0500, Linda Messerschmidt wrote:
> > When it comes to limiting the users, I think you will have to write
> > your own master that prevents them from accessing modules that can be
> > "dangerous".
> Thanks to you (and everyone else) for the replies.  That's what I was
> afraid of.  I'll poke around at the base master and see what I can
> find.

take a look at sTeam too. sTeam implements a protection layer used to
prevent objects from calling other objects that it diesn't have
permission for. 

i don't know if steam needs the master for that or if it does it all
through the proxy-objects, but it may be helpful either way.

> If I just want to allow a short list of pre-approved modules,
> maybe it won't be too complicated to add, though it sounds like some
> people are already working on similar stuff that may well be done by
> the time it becomes a factor.

don't count on that though, better ask those people for what they have
so far and try to work with it. your feedback and improvements will also
help them... :-)

greetings, martin.
-- 
cooperative communication with sTeam      -     caudium, pike, roxen and unix
offering: programming, training and administration   -  anywhere in the world
--
pike programmer   working in china                      community.gotpike.org
unix system-      iaeste.(tuwien.ac|or).at                     open-steam.org
administrator     caudium.org                                    is.schon.org
Martin Bähr       http://www.iaeste.or.at/~mbaehr/