POV-Ray: Newsgroups: povray.general: Command-line option to turn off #macro or #fopen or #write?: Re: Command-line option to turn off #macro or #fopen or #write?

POV-Ray : Newsgroups : povray.general : Command-line option to turn off #macro or #fopen or #write? : Re: Command-line option to turn off #macro or #fopen or #write?		Server Time 28 Jul 2024 22:20:14 EDT (-0400)

From: Ron Parker
Date: 14 Nov 2000 08:31:09
Message: <slrn912fku.5q4.ron.parker@fwi.com>

On Mon, 13 Nov 2000 16:50:56 -0700, Space Dude wrote:
>Anyway, I'd like to bring the farm back online, but in order to do so, I
>need to know if it's possible to remove the ability to do #fopen's and
>#write's via the command line or something like that.  I don't want to
>disable #macros because they're a powerful part of the povray 3.1
>language, but I do want to make the renderer a little more secure.

You might try either modifying the source code to disable the ability to
do #write (and #fopen) or you might try just using chroot and/or file 
permissions to restrict where the POV process is allowed to write.

-- 
Ron Parker   http://www2.fwi.com/~parkerr/traces.html
My opinions.  Mine.  Not anyone else's.

Post a reply to this message