--- In frink@yahoogroups.com, Alan Eliasen <eliasen@...> wrote:
> Yes, there is a way to embed Frink into a Java program. The
section
> of the documentation entitled "Embedding Frink" is a good place to
start:
>
> http://futureboy.us/frinkdocs/#EmbeddingFrink
I don't know how i've overlooked that all of last night.
> That's why Frink has its own
> security manager framework, which prevents insecure operations from
> being performed on your system, but you have to enable that security
> manager, which is not well-documented. I'll have to improve that.
>
> Think about: what if someone executes:
> read["file:///etc/passwd"]
>
> Having a good security manager is the reason that I can allow
people
> to type in arbitrary Frink programs in my web interface and execute
them
> on my computer.
>
I would certainly be interested in any documentation on this, i
currently planned on using chroots and resource limits to prevent this
(ain't unix grand?) but if i can do it inside of frink i could
probably have things much more useful.