[1/4] from: rebol665:ifrance at: 20-Jan-2002 16:50
Hi Rebollers I am experiencing a security annoyance regarding the 'do command. Let me illustrate this with a minimal (not to be tested) rebol program : rebol [title: "security annoyance"] do %../include/foo.r foo halt The 'do line always ask me for permission to execute %foo.r. The only way to get through is to move/copy the include directory in the program directory. As I intend to use the include directory from various locations, it is not the best solution. I have tried several work-around unsuccesfully : - the secure function - the rebol.exe -s - the rebol.exe --secure none My rebol directory is organized like this : /d/rebview <-- rebol home /d/rebview/local <-- base for all my programs /d/rebview/local/p1 <-- a program directory /d/rebview/local/p2 <-- a program directory ... /d/rebview/local/pX <-- a program directory /d/rebview/local/include <-- the place for reusable program Any idea ? Patrick
[2/4] from: al:bri:xtra at: 21-Jan-2002 9:33
> As I intend to use the include directory from various locations, it is not
the best solution.
> Any idea ?
If you're going to use the scripts in the include directory from various locations, why not 'do all the scripts in the include directory as Rebol starts up? For example, in my %User.r, I've got: do %../Values/Values.r which is the script that 'do-es all my common scripts. Because the 'do line is in %User.r, it bypasses Rebol's security restriction. I've appended %Values.r after my .sig. Andrew Martin ICQ: 26227169 http://valley.150m.com/ -><- Values: make object! [ Problem: none Files: make block! 100 use [Do-File Patches] [ Do-File: function [File [file!]] [Loaded Needs] [ File: clean-path File if not found? find Files File [ Loaded: load/header File Needs: Loaded/1/Needs if all [ found? Needs block? Needs ] [ foreach Need Needs [ if file? Need [ Do-File Need ] ] ] Problem: File do File ; Deliberately done to get Rebol to print Script: etc from 'do. append Files File Problem: none ] ] append Files clean-path Rebol/Script/Header/File Patches: %Patches.r if exists? Patches [ Do-File Patches ] foreach File read %. [ Do-File File ] ] ]
[3/4] from: nitsch-lists:netcologne at: 22-Jan-2002 22:03
RE: [REBOL] security annoyance if you put stuff in the public-folder, it can be read from every script. -Volker [rebol665--ifrance--com] wrote:
[4/4] from: rebol665:ifrance at: 23-Jan-2002 13:14
Hi Volker, This is great news ! I thought that the public folder was dedicated for file-caching. and I am pretty sure I am not the only one. Patrick