Re: limiting subroutine run time

2005-05-11 Thread Stas Bekman
Igor Chudov wrote: --- Perrin Harkins <[EMAIL PROTECTED]> wrote: On Wed, 2005-05-11 at 07:57 -0700, Igor Chudov wrote: Can you be a little more specific? Are you talking about damage such as abuse of resources, or are you talking about gaining unauthorized privileges? Possibly both. The thing is,

Re: limiting subroutine run time

2005-05-11 Thread Igor Chudov
--- Stas Bekman <[EMAIL PROTECTED]> wrote: > > > Thanks. I will try using alarm also. > > Though, be aware of the issues with signals in > recent perls and > specifically with Apache2. > http://perl.apache.org/docs/2.0/user/coding/coding.html#Using_Signal_Handlers Thank you Stas. I disabled m

Re: limiting subroutine run time

2005-05-11 Thread Igor Chudov
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Wed, 2005-05-11 at 07:57 -0700, Igor Chudov > wrote: > > Can you be a little more specific? Are you talking > > about damage such as abuse of resources, or are > you > > talking about gaining unauthorized privileges? > > Possibly both. The thin

Re: limiting subroutine run time

2005-05-11 Thread Stas Bekman
Thanks. I will try using alarm also. Though, be aware of the issues with signals in recent perls and specifically with Apache2. http://perl.apache.org/docs/2.0/user/coding/coding.html#Using_Signal_Handlers -- __ Stas Bekman

Re: limiting subroutine run time

2005-05-11 Thread Perrin Harkins
On Wed, 2005-05-11 at 07:57 -0700, Igor Chudov wrote: > Can you be a little more specific? Are you talking > about damage such as abuse of resources, or are you > talking about gaining unauthorized privileges? Possibly both. The thing is, no one uses Safe. Since no one uses it, you can't count o

Re: limiting subroutine run time

2005-05-11 Thread Igor Chudov
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Tue, 2005-05-10 at 21:43 -0700, Igor Chudov > wrote: > > These user submitted perl scripts will be executed > > inside Safe.pm compartment. I hope that they will > be > > secure enough. > > It won't be, if someone is determined to damage your >

Re: limiting subroutine run time

2005-05-11 Thread Perrin Harkins
On Tue, 2005-05-10 at 21:43 -0700, Igor Chudov wrote: > These user submitted perl scripts will be executed > inside Safe.pm compartment. I hope that they will be > secure enough. It won't be, if someone is determined to damage your system. > My question is, is there some way to limit execution >

Re: limiting subroutine run time

2005-05-11 Thread Enno
This is not mod_perl related, but take a look at: perldoc -f alarm On Tue, 10 May 2005, Igor Chudov wrote: > I am working on a system on algebra.com where anyone > could define a math solver for a particular kind of > problem. It could be defined either via a custom > markup language (not inte

limiting subroutine run time

2005-05-10 Thread Igor Chudov
I am working on a system on algebra.com where anyone could define a math solver for a particular kind of problem. It could be defined either via a custom markup language (not interesting), or as a perl script. These user submitted perl scripts will be executed inside Safe.pm compartment. I hope th