Re: os.execute is scary;

[Reuben Thomas <rrt@...>]

> We've modified the standard functions so that 'os.execute', 'os.popen' and
> some other things (eg os.open etc) are classed as 'sensitive' functions.
>
> A lua script can call a function 'io.enablesecurity("password")' which will
> disable all these functions, until 'io.disablesecurity("password")' is called.

What's the problem with simply executing user scripts in a different
global environment? The existing facilities are geared to doing exactly
this.

-- 
http://www.mupsych.org/~rrt/ | golf, n.  a good walk spoiled (Twain)