Script permissions
[1/6] from: dness:home at: 23-Jun-2001 14:43
Thanks to some help here I am successfully calling an external
application via a `CALL'. However, on the way tp execution I get
a `Security Check' that says:
Script requests premission to open a port or read/write on...
Where can I find out how to control/manage this? (in particular to
avoid the question in circumstances where I am not concerned about
security)?
[2/6] from: brett:codeconscious at: 24-Jun-2001 11:42
Hi David,
You can information in the Core2.3 manual found on this page:
http://www.rebol.com/docs.html
or more specifically on security:
http://www.rebol.com/docs/core23/rebolcore-3.html#pgfId-297453
and additionally in the very next section describing program arguments.
Brett.
[3/6] from: dness::home::com at: 23-Jun-2001 23:35
Brett Handley wrote:
> Hi David,
> You can information in the Core2.3 manual found on this page:
<<quoted lines omitted: 3>>
> and additionally in the very next section describing program arguments.
> Brett.
Thank you for another helpful pointer.
I find I can do what I want without any `security problem' if I execute
REBOL mycode.r
but if I go to my REBOL desktop and modify BOOKMARKS.R so that it contains
file "NessCtrl" %mycode.r
then I get a `security check' when I click on my `NessCtrl' folder on my
REBOL desktop and try to do the execute this way.
Does this make sense?
[4/6] from: brett:codeconscious at: 24-Jun-2001 14:39
Hi David,
Rebol has a sandbox model (I don't know of any official documentation I can
point you to).
The sandbox that a script runs in appears to be based on where the script
lives. That is the same directory of the script and sub-directories are ok
to access.
So you set up your icon in bookmarks.r. You supplied no path so your
mycode.r file must reside in the View directory itself.
For you to get a security check, your mycode.r file must have tried to
access a file or directory outside of the View directory or one of it's
subdirectories.
There's more to it, but I have to run off. I'll try to go into more detail
later unless someone else jumps in.
See also,
http://www.escribe.com/internet/rebol/m9642.html
Brett.
[5/6] from: brett:codeconscious at: 24-Jun-2001 23:59
Actually, there probably not that much more to it.
secure query
Will show you the current security settings.
I've created a little program that simply shows the settings and attempts a
write and a create directory, to illustrate when the settings come into
play.
However, there is a small glitch. Just executing my little program will
cause the security check because of the location of
my supporting scripts. In order to avoid these two checks I would need to
have the supporting scripts land within the cache in the same directory as
the script or in a subdirectory of the running script's directory.
In View "Goto":
http://www.codeconscious.com/rebsite/sandbox-tester.r
Brett
[6/6] from: dness:home at: 24-Jun-2001 10:15
Brett Handley wrote:
> Actually, there probably not that much more to it.
> secure query
<<quoted lines omitted: 10>>
> http://www.codeconscious.com/rebsite/sandbox-tester.r
> Brett
That's a big step forward in helping me understand.
Thanks.
Notes
- Quoted lines have been omitted from some messages.
View the message alone to see the lines that have been omitted