Re: scheme in sandbox?

[Rob Browning]

Major A <address@hidden> writes:

> Since the scheme code is going to be supplied by the user or an
> unknown third party, I would like to restrict the capabilities of
> the interpreter to the basic scheme language, without any
> input/output or network capabilities, so that the scheme code can
> only ever use external functions that I explicitly declare via the C
> interface to guile.
>
> Is this kind of sandbox setup possible with guile?

The short answer is yes probably, starting with 1.6.0.

See my latest message (just yesterday) in the thread "Re: loading a
module via an absolute path" for a good start, though we definitely
need more thorough documentation of this in the long run.

Hope this helps.

-- 
Rob Browning
rlb @defaultvalue.org, @linuxdevel.com, and @debian.org
Previously @cs.utexas.edu
GPG=1C58 8B2C FB5E 3F64 EA5C  64AE 78FE E5FE F0CB A0AD