Re: How do Least Privilege Security Practices?

Frederick Cheung
Thu, 18 Oct 2007 16:34:15 -0000

On 18 Oct 2007, at 17:14, Greg Willits wrote:

>
> CCH wrote:
>> Hi Greg
>>
>> You may want to look at Tim Harper''s role_requirement plugin
or
>> perhaps even goldberg...
>
> Hmm, this isn''t about limiting "users" as in the human
kind with
> app-layer code -- it''s about limiting source code with specific
> restrictions at the language/OS level. I''ve just never tried to do
> that
> with a language like Ruby (python etc), so wondering how it is done.
>
> I can explain further with an example if that''s needed to clarify.
>
do ruby''s taint levels or why''s freaky sandbox give you some
of what
you want ?

Fred