From: Yukihiro Matsumoto <matz@...>
Date: 2004-09-03T14:44:34+09:00
Subject: Re: Resource limitations

Hi,

In message "Re: Resource limitations"
    on Fri, 3 Sep 2004 14:30:23 +0900, David Ross <drossruby@yahoo.com> writes:

|> No.  How do you think it should be implemented? 
|> Watching every
|> resource allocation?
|
|The implementation could watch resource allocation. I
|would like to see more security enhanced handling in
|Ruby.

I know what you want.  The point is that I don't know how to implement
it effectively in portable way.  By adding watcher to every resource
allocation in the interpreter can limit resources handled by the
interpreter, but not in the extensions.  It definitely requires OS
support to implement full restriction good enough to enhance security.

							matz.