RE: Perl Model...

2001-02-23 Thread wiz
That's somewhat along the lines that I'm thinking. It would have to be Perl-core. I was also thinking from the standpoint of command-line stuff as well (there are any number of ways to launch perl that aren't relative to cgi). As far as the Java Model, I plan on taking a look at it over the wee

Re: Perl Model...

2001-02-23 Thread Dan Sugalski
At 10:13 AM 2/23/2001 -0600, Jarkko Hietaniemi wrote: >This looks like a good link on Java security model: > >http://www.emu.edu.tr/edufacil/compcent/bookslib/Java,%20by%20Michael%20Morrison,%20Second%20Edition/ch35.htm > >Though I must admit that it looks suspicious to have a whole book >online l

Re: Perl Model...

2001-02-23 Thread Jarkko Hietaniemi
This looks like a good link on Java security model: http://www.emu.edu.tr/edufacil/compcent/bookslib/Java,%20by%20Michael%20Morrison,%20Second%20Edition/ch35.htm Though I must admit that it looks suspicious to have a whole book online like that... -- $jhi++; # http://www.iki.fi/jhi/ #

RE: Perl Model...

2001-02-23 Thread wiz
I actually have some ideas: (Apache was a bad example. Sendmail would probably be a better model.) o Scripts are only executable if listed in 'perl.cf' o Web/CGI scripts are listed in 'cgi.cf' o Other specific conditionals(?): o Execute if $ENV{REMOTE_USER}/$user is defined/valid

Re: Perl Model...

2001-02-23 Thread David Mitchell
Jarkko Hietaniemi <[EMAIL PROTECTED]> chipped in: > On Fri, Feb 23, 2001 at 10:26:14AM -0500, Dan Sugalski wrote: > > At 07:12 AM 2/23/2001 -0500, wiz wrote: > > >Just curious, has anyone ever had any discussion regarding a 'security-aware' > > >Perl model? Some issues have recently ended up on m

Re: Perl Model...

2001-02-23 Thread Jarkko Hietaniemi
On Fri, Feb 23, 2001 at 10:26:14AM -0500, Dan Sugalski wrote: > At 07:12 AM 2/23/2001 -0500, wiz wrote: > >Just curious, has anyone ever had any discussion regarding a 'security-aware' > >Perl model? Some issues have recently ended up on my desk, and I been having > >some preliminary thoughts on t

Re: Perl Model...

2001-02-23 Thread Dan Sugalski
At 07:12 AM 2/23/2001 -0500, wiz wrote: >Just curious, has anyone ever had any discussion regarding a 'security-aware' >Perl model? Some issues have recently ended up on my desk, and I been having >some preliminary thoughts on the subject. It would be nice to be able to set >some rules for what Pe