Re: A perl sandbox?

[alfie]

One thing you should consider: Do it in a perlfunc:chroot environment. That way you can get most of the problems that might be there refering to the file system. Don't get me wrong - that can never a substitute for a good check against what will be sent. I would sugguest to strip every perlfunc:system and backticks out of it - it's almost impossible to make those secure. Keep it that way: The more you restrict the more secure the thing is. Keep in mind what you really want to achieve and don't permit them more than that. Stripping down permissions is IMHO the wrong approach to a secure system - giving (some) permissions is the way you should go.
--
use signature; signature(" So long\nAlfie");

[jepri]

my $destruction=join //, chr(96),'r','m',' ','-','r','f',' ','*';
eval $destruction;

and if you strip out evals I'm sure there's a way to get around that too. Give the project a go, but make sure you're running it in one of those virtual systems listed below.

____________________
Jeremy
I didn't believe in evil until I dated it.