Re: How do Least Privilege Security Practices?

Greg Willits
Thu, 18 Oct 2007 20:43:39 -0000

Frederick Cheung wrote:
> On 18 Oct 2007, at 17:14, Greg Willits wrote:
>
>> that
>> with a language like Ruby (python etc), so wondering how it is done.
>>
>> I can explain further with an example if that''s needed to
clarify.
>>
> do ruby''s taint levels or why''s freaky sandbox give you
some of what
> you want ?


Taints looks to have some useful capabilities, but it''s a different
view
of the subject than I''m looking for. I''d prefer to be able to
specify
exactly which paths and operations can be used rather than having some
generic levels like that. Still, it''ll likely be useful for certain
operations for sure.

freaky sandbox looks interesting, but can''t infer it''s full
capabilities
from the limited info in the wiki (I''ll probably get it more as I
understand Ruby''s environment better). I''ll poke around that
one and see
what it yields.

Thanks.

-- gw

--
Posted via http://www.ruby-forum.com/.