From: James Britt <james_b@...>
Date: 2005-10-09T00:09:56+09:00
Subject: Re: Save the world from evil code crusade

aurelianito wrote:
> Hello!
> It's my (Aureliano) again.
> 
> I'm trying to implement something similar to the Java Security Manager
> for Ruby. The project is currently in prealpha stage at rubyforge
> (http://securedruby.rubyforge.org).

If detecting malicious code is essentially impossible, would it be a 
reasonable alternative to compile a version of Ruby that simply could 
not do Bad Things?  Change or remove all methods of potential evil.  No 
'system', no file manipulation, no 'dl',  that sort of thing.  Then 
execute all foreign code in this sandboxed version.

James

-- 

http://www.ruby-doc.org - The Ruby Documentation Site
http://www.rubyxml.com  - News, Articles, and Listings for Ruby & XML
http://www.rubystuff.com - The Ruby Store for Ruby Stuff
http://www.jamesbritt.com  - Playing with Better Toys