The permission options which allow pov-script to do everything have been
repeated over and over again a million times.
  However, has anyone thought that perhaps not everyone would want to allow
*everything*?
  What are the options to allow reading but not writing, for example? Is
there a list somewhere?

-- 
#macro M(A,N,D,L)plane{-z,-9pigment{mandel L*9translate N color_map{[0rgb x]
[1rgb 9]}scale<D,D*3D>*1e3}rotate y*A*8}#end M(-3<1.206434.28623>70,7)M(
-1<.7438.1795>1,20)M(1<.77595.13699>30,20)M(3<.75923.07145>80,99)// - Warp -

Post a reply to this message

On 6 Aug 2002 18:48:30 -0400, Warp wrote:
>   What are the options to allow reading but not writing, for example? Is
> there a list somewhere?

Read unix.cpp, in the function UNIX_Process_Povray_Conf (which probably
needs a little work.  Case-sensitive, Mark?)

-- 
#local R=<7084844682857967,0787982,826975826580>;#macro L(P)concat(#while(P)chr(
mod(P,100)),#local P=P/100;#end"")#end background{rgb 1}text{ttf L(R.x)L(R.y)0,0
translate<-.8,0,-1>}text{ttf L(R.x)L(R.z)0,0translate<-1.6,-.75,-1>}sphere{z/9e3
4/26/2001finish{reflection 1}}//ron.parker@povray.org My opinions, nobody else's

Post a reply to this message

On 7 Aug 2002 00:02:46 -0400, Ron Parker wrote:
> On 6 Aug 2002 18:48:30 -0400, Warp wrote:
>>   What are the options to allow reading but not writing, for example? Is
>> there a list somewhere?

Okay, I made this quick-and-dirty guide to what can be in povray.conf.  
Note that this is case-sensitive.  

[File I/O Security]
none | read-only | restricted

[Shellout Security]
allowed | forbidden

[Current Directory Read/Write]
allowed | forbidden

[Permitted Input Paths]
nn=<dir>

[Permitted Output Paths]
nn=<dir>

For the lines that say "nn=<dir>" you may specify any number from 0 to 64
for nn, and give the name of a directory for <dir>.  Note that <dir> can 
be an absolute path, a path relative to the install directory (use
"%INSTALLDIR%"), or a path relative to the current working directory (which
changes depending on where you invoked POV from; obviously this is of 
limited usefulness.)  POV does not currently support the '~' character,
either by itself or with a username (e.g. ~ron -> /home/ron).

-- 
#local R=<7084844682857967,0787982,826975826580>;#macro L(P)concat(#while(P)chr(
mod(P,100)),#local P=P/100;#end"")#end background{rgb 1}text{ttf L(R.x)L(R.y)0,0
translate<-.8,0,-1>}text{ttf L(R.x)L(R.z)0,0translate<-1.6,-.75,-1>}sphere{z/9e3
4/26/2001finish{reflection 1}}//ron.parker@povray.org My opinions, nobody else's

Post a reply to this message

This should definitely be included in the official distribution somewhere
where it can be easily found (eg. a file called "permissions.readme" or
whatever, besides the documentation of course).

-- 
#macro M(A,N,D,L)plane{-z,-9pigment{mandel L*9translate N color_map{[0rgb x]
[1rgb 9]}scale<D,D*3D>*1e3}rotate y*A*8}#end M(-3<1.206434.28623>70,7)M(
-1<.7438.1795>1,20)M(1<.77595.13699>30,20)M(3<.75923.07145>80,99)// - Warp -

Post a reply to this message