security annoyance
[1/4] from: rebol665:ifrance at: 20-Jan-2002 16:50
Hi Rebollers
I am experiencing a security annoyance regarding the 'do command.
Let me illustrate this with a minimal (not to be tested) rebol program :
rebol [title: "security annoyance"]
do %../include/foo.r
foo
halt
The 'do line always ask me for permission to execute %foo.r. The only way to
get through is to move/copy the include directory in the program directory.
As I intend to use the include directory from various locations, it is not
the best solution.
I have tried several work-around unsuccesfully :
- the secure function
- the rebol.exe -s
- the rebol.exe --secure none
My rebol directory is organized like this :
/d/rebview <-- rebol home
/d/rebview/local <-- base for all my programs
/d/rebview/local/p1 <-- a program directory
/d/rebview/local/p2 <-- a program directory
...
/d/rebview/local/pX <-- a program directory
/d/rebview/local/include <-- the place for reusable program
Any idea ?
Patrick
[2/4] from: al:bri:xtra at: 21-Jan-2002 9:33
Patrick wrote:
> As I intend to use the include directory from various locations, it is not
the best solution.
> Any idea ?
If you're going to use the scripts in the include directory from various
locations, why not 'do all the scripts in the include directory as Rebol
starts up?
For example, in my %User.r, I've got:
do %../Values/Values.r
which is the script that 'do-es all my common scripts. Because the 'do
line is in %User.r, it bypasses Rebol's security restriction. I've appended
%Values.r after my .sig.
Andrew Martin
ICQ: 26227169 http://valley.150m.com/
-><-
Values: make object! [
Problem: none
Files: make block! 100
use [Do-File Patches] [
Do-File: function [File [file!]] [Loaded Needs] [
File: clean-path File
if not found? find Files File [
Loaded: load/header File
Needs: Loaded/1/Needs
if all [
found? Needs
block? Needs
] [
foreach Need Needs [
if file? Need [
Do-File Need
]
]
]
Problem: File
do File ; Deliberately done to get Rebol to print
Script:
etc from 'do.
append Files File
Problem: none
]
]
append Files clean-path Rebol/Script/Header/File
Patches: %Patches.r
if exists? Patches [
Do-File Patches
]
foreach File read %. [
Do-File File
]
]
]
[3/4] from: nitsch-lists:netcologne at: 22-Jan-2002 22:03
RE: [REBOL] security annoyance
if you put stuff in the public-folder, it can be read from every script.
-Volker
[rebol665--ifrance--com] wrote:
[4/4] from: rebol665:ifrance at: 23-Jan-2002 13:14
Hi Volker,
This is great news ! I thought that the public folder was dedicated for
file-caching. and I am pretty sure I am not the only one.
Patrick