Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl-Sensitive Sunglasses

Re: A perl sandbox?

by alfie (Pilgrim)
on Apr 25, 2001 at 14:10 UTC ( #75404=note: print w/replies, xml ) Need Help??

in reply to A perl sandbox?

One thing you should consider: Do it in a perlfunc:chroot environment. That way you can get most of the problems that might be there refering to the file system. Don't get me wrong - that can never a substitute for a good check against what will be sent. I would sugguest to strip every perlfunc:system and backticks out of it - it's almost impossible to make those secure. Keep it that way: The more you restrict the more secure the thing is. Keep in mind what you really want to achieve and don't permit them more than that. Stripping down permissions is IMHO the wrong approach to a secure system - giving (some) permissions is the way you should go.
use signature; signature(" So long\nAlfie");

Replies are listed 'Best First'.
Re: Re: A perl sandbox?
by jepri (Parson) on Apr 26, 2001 at 05:19 UTC
    my $destruction=join //, chr(96),'r','m',' ','-','r','f',' ','*'; eval $destruction;

    and if you strip out evals I'm sure there's a way to get around that too. Give the project a go, but make sure you're running it in one of those virtual systems listed below.

    I didn't believe in evil until I dated it.

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://75404]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chanting in the Monastery: (2)
As of 2022-05-16 18:29 GMT
Find Nodes?
    Voting Booth?
    Do you prefer to work remotely?

    Results (63 votes). Check out past polls.