From: "Dr. Arne Babenhauserheide" <arne_bab@web.de>
To: Mike Gran <spk121@yahoo.com>
Cc: Ryan Raymond <rjraymond@oakland.edu>, guile-user@gnu.org
Subject: Re: Evaluation with function whitelist
Date: Sat, 15 Jul 2023 12:40:36 +0200 [thread overview]
Message-ID: <877cr178o2.fsf@web.de> (raw)
In-Reply-To: <314930819.342984.1689399952041@mail.yahoo.com>
[-- Attachment #1: Type: text/plain, Size: 973 bytes --]
Hi Mike,
Mike Gran <spk121@yahoo.com> writes:
>>good choice. Basically, I want the user to be able to open a repl shell,
>>but by default it should have *no* bindings except the ones I whitelisted.
> Define a module in a file with the "#:pure" option so that it starts off empty.
…
> Using the real repl is probably a no-go, since it has meta-commands
> like ",m" that would let the user ignore your whitelist.
>
> I didn't really test this, but it should be mostly correct.
Sandboxed Evaluation may also be interesting for this:
https://www.gnu.org/software/guile/manual/html_node/Sandboxed-Evaluation.html
(to prevent users from blocking the process)
If you want a long term view for the most powerful approach that
preserves allow-listing, see Spritely Goblins:
https://spritely.institute/files/docs/guile-goblins/latest/A-simple-greeter.html
Best wishes,
Arne
--
Unpolitisch sein
heißt politisch sein,
ohne es zu merken.
draketo.de
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 1125 bytes --]
next prev parent reply other threads:[~2023-07-15 10:40 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-07-15 3:03 Evaluation with function whitelist Ryan Raymond
2023-07-15 5:45 ` Mike Gran
2023-07-15 10:40 ` Dr. Arne Babenhauserheide [this message]
2023-07-15 14:09 ` Thompson, David
2023-07-15 20:05 ` Ryan Raymond
2023-07-15 21:01 ` Dr. Arne Babenhauserheide
2023-07-16 2:09 ` Mike Gran
2023-07-16 9:31 ` Dr. Arne Babenhauserheide
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/guile/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=877cr178o2.fsf@web.de \
--to=arne_bab@web.de \
--cc=guile-user@gnu.org \
--cc=rjraymond@oakland.edu \
--cc=spk121@yahoo.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).