$compartment->deny(qw(:base_io :ownprocess :subprocess :filesys_read :sys_db :filesys_open :filesys_write :dangerous)); $compartment->permit(qw(print say pack unpack require caller));