From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: =?UTF-8?Q?Kovacsics_R=C3=B3bert?= Newsgroups: gmane.lisp.guile.user Subject: Guile Sandbox and importing modules Date: Tue, 7 Apr 2020 19:44:47 +0100 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="34869"; mail-complaints-to="usenet@ciao.gmane.io" To: Guile User Mailing List Original-X-From: guile-user-bounces+guile-user=m.gmane-mx.org@gnu.org Tue Apr 07 20:45:18 2020 Return-path: Envelope-to: guile-user@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jLtDq-0008zO-I0 for guile-user@m.gmane-mx.org; Tue, 07 Apr 2020 20:45:18 +0200 Original-Received: from localhost ([::1]:51996 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jLtDp-0001OF-Kc for guile-user@m.gmane-mx.org; Tue, 07 Apr 2020 14:45:17 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:42260) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jLtDZ-0001O5-Ni for guile-user@gnu.org; Tue, 07 Apr 2020 14:45:02 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1jLtDY-0003Ie-Ng for guile-user@gnu.org; Tue, 07 Apr 2020 14:45:01 -0400 Original-Received: from mail-ed1-x533.google.com ([2a00:1450:4864:20::533]:41219) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1jLtDY-0003Hr-G3 for guile-user@gnu.org; Tue, 07 Apr 2020 14:45:00 -0400 Original-Received: by mail-ed1-x533.google.com with SMTP id v1so5335073edq.8 for ; Tue, 07 Apr 2020 11:44:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=zvx8p1E9Pvq6UFbhgwVxnNnZG3U7MeP8TlMMjiyD2dI=; b=jyvAGBuE9kpScXnOQgFVk9105kCxUMSit6sXEHRQtKE5rg5vBOeOvKTvVKjqMk9o6F jqxd9MKuNGRZLJ3j76nFLpw22KU7sXdzcODTPsCu49ZgWK/o+zzu91SfCMdHb+mAhkbH 0NSa+zbix0A6sBhq8fntzbhoeYXgMURW062zGa7OtrSOGSsQAZb8qQySTjv/ya5iWNj2 tsvk+ycoB3V00afU15vlP/dOIrtZAb60MOrc4xcEoe1Ice6Pimx6BU/btwv8tCE8PjXJ k7I8W7bOT/APzPVkym0YwU39dbix1Bu5HQ8qfFnouZUD5wy2VwIiO9svEVJqIB+zjl07 rdmA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=zvx8p1E9Pvq6UFbhgwVxnNnZG3U7MeP8TlMMjiyD2dI=; b=pIGvjx2Y0MjdIBIKM+NIUMnfbSF19VldqrVe9Q0tY/iMgeR2zQGayoO1gRe8hEKaJd jBsYyGRBC2s85tcUryx3i0xjusOZSUVCB62vdBsxvlEjvP9bVP00i1f1lLHcSAq8HF++ mUcVDlf30Adqd+TiYXslT5jb+hM+nsJzRnQqw39KEbucA7L75f5L9EAzQcvhThMAdIQo gLECxtdxHWGhwNBF7ClOQndi6YDCdPULRmtm2GrP0SGgt8udwpPyFtq8wdrEoNQKVk5d UvU63rh4oDMqzv1GmfXo3LXdFSBatDLX8cVs7NrUUIvu2hE+t/hjavIQycRkbo+E5V6w gS5A== X-Gm-Message-State: AGi0PuaPqv87Y4z6uh7LEZCjLN1zL3VElDPxucD2o6UsQpWrtO4SrLg4 rindUphv1BTJ4nX+c+nflU+hXwY3Bg0VkFd8SDYaxg/CtNo= X-Google-Smtp-Source: APiQypJE1eHeVBpFk2X1X5IyFTvKuv7cKPvA1Qq/ei9sNJG99uhXSTPjNmoPj10X0pxZMyguOAhxo3hYXhdIvketBYE= X-Received: by 2002:a17:906:e251:: with SMTP id gq17mr111097ejb.110.1586285098620; Tue, 07 Apr 2020 11:44:58 -0700 (PDT) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:1450:4864:20::533 X-BeenThere: guile-user@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: General Guile related discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-user-bounces+guile-user=m.gmane-mx.org@gnu.org Original-Sender: "guile-user" Xref: news.gmane.io gmane.lisp.guile.user:16371 Archived-At: Hi, I have been playing around with libfive-{guile,studio}, which seems nice so far, but one of the problems is it doesn't support importing other modules due to the sandboxing, AFAICS (https://github.com/libfive/libfive/issues/285). I wonder if I could have some opinions on it, e.g. if I were to put use-modules into a sandbox would it break the sandbox completely? Presumably if I am importing/compiling code (such as read/eval) within the sandbox just as if it were written inline, it won't break the sandbox -- just fail to load. Do I have to write my own load function that does this? Will this strategy break with compiled .go files, which might I presume call out to arbitrary C or somesuch, and would first need to be analysed. Thanks, Robert