Warp wrote:
> 
> Space Dude <swe### [at] rapucaredu> wrote:
> : I'm using the stock povray 3.1g version.
> 
>   You still haven't answered to my warning about security issues.
> 
>   Let me put it clear: If you render with pov3.1g anything people send to
> you, anyone can do anything he/she likes. It's perfectly possible to, for
> example, destroy the entire home directory, get free access for anyone to
> your account and so on.
> 
>   It can be avoided by filtering the code people send. This, however, may
> not be a 100% safe solution since there may be ways of encoding nasty
> commands so that they can't be triggered by any filter.

I guess that, at the very least, he has set up a dedicated account to
this system, with specified, limited memory and disk resources. But I
agree this does not solve everything!

-- 

      __  __ __  __  _
|  | /  \  /  / |_  /  |/
\/\/ \__/ /_ /_ |__ \_ |\

Post a reply to this message