On 8/8/07, Tony Sidaway <[EMAIL PROTECTED]> wrote: > > And so on. > > It seems to me that I need to do this otherwise just about everything > in the namespace will be available at runtime, co-optable for bad > stuff. > > Or am I just being a silly sausage? Is there a better way of doing this?
The sandbox egg will be the only thing that gives a bit of security, but it provides only a very basic Scheme dialect and is pretty slow. The only (somewhat brute-forcish) solution that comes to mind is to compile to a static executable and hack somethhing together with rlimit and chroot(1). cheers, felix _______________________________________________ Chicken-users mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/chicken-users
