[cad-linux] Re: executable data - tcl "safe interpreter"

I don't know about any other languages, but tcl
provides a safe interpreter with adjustable security
restrictions.
http://tcl.tk:8003/software/plugin/safetcl.html
There's also stuff in the tcl reference manual.

For executables, could we use setuid and restrict the
executable to a certain directory (with the setuid, no
permissions for anything else)?  

It seems to me that there must be a way to safely run
executables, as long as those executables went by the
"normal rules" (i.e. library calls) and didn't exploit
some security loophole to become root... but I'm not
sure what.

Bob

--- Janek Kozicki <janek_listy@xxxxx> wrote:
> phrostie said:     (by the date of Wed, 10 Sep 2003
> 18:15:19 -0400)
> 
> > On Wednesday 10 September 2003 18:06, Bruno Postle
> wrote:
> > >  We have
> > > an entire anti-virus industry that only exists
> because some software
> > > vendors encourage executable code mixed within
> documents.
> > >
> > good point
> 
> my friend found this:
>  
> Axiom is useful for
> research and development of mathematical algorithms.
> It defines a
> strongly typed, mathematically correct type
> hierarchy. It has a
> programming language and a built-in compiler.
> .
> Axiom has been in development since 1973 and was
> sold as a
> commercial product. It has been released as free
> software.
> .
> Efforts are underway to extend this software to (a)
> develop a
> better user interface (b) make it useful as a
> teaching tool
> (c) develop an algebra server protocol (d) integrate
> additional
> mathematics (e) rebuild the algebra in a literate
> programming style
> (f) integrate logic programming (g) develop an Axiom
> Journal with
> refereed submissions.
> 
> 
> I will have to check this.
> 
> --- 
> # Janek Kozicki
> 


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

Other related posts: