From: Robert Klemme <bob.news@...>
Date: 2005-10-09T02:31:50+09:00
Subject: Re: Save the world from evil code crusade

aurelianito <aurelianocalvo@yahoo.com.ar> wrote:
>>> I hope this stops people from suggesting clever hacks (like the one
>>> you just made). It's not about the clever hack. It's about how do I
>>> declare it properly and enforce it.
>>
>> Don't worry -- I'm sure it will stop a number of people from
>> continuing to try to help you.
>
> What I've tried to say is that I want to be able to declare the
> security in other way. The way I want to do it is much more granular
> and declarative. I'm not looking for a way to actually implement
> evil.rb. I take it as it it is and stop it to do things than I don't
> want to. That's a different security model.
>
> I'm really sorry if I offended you. That's not my intention and please
> take my apologies. I'll try to write things in a way that I don't
> offend any one else.

After reading the whole thread I still have two questions:

1. What exactly will your security model look like?  I'm not even sure that 
you have a clear vision yet so maybe before dealing with implementations it 
might be more helpful to first make clear what will be allowed, what not and 
how you want to separate areas of different capabilities.

2. When 1 is answered this one might become more clear: what security you 
need is not possible using threads with different $SAFE levels?

Kind regards

    robert