however, externals are free to *not* use `sys_open` so that could be easily circumvented
On 8/31/21 4:37 PM, Antoine Rousseau wrote:
>>
>> i wonder whether it would be possible (with Pd>=0.42) to create a patch
>> that creates a gui-plugin on the fly.
>> if this is true, then you can already do everything that [file] allows you
>> to do - and much more
>
>
> yes, but [file] will be extremely useful in the "-nogui" and libpd contexts.
yes definitely. and much more.
i didn't write [file] to write exploits but to be useful.
>
> BTW, and about the "exploits", I'm wondering if this would be feasible to
> implement a safety lock callable from a libpd based application, that would
> restrict the write permission (of every Pd object) to a given list of
> directories.
we could probably restrict `sys_open` and friends.
however, externals are free to *not* use `sys_open` so that could be
easily circumvented.
mfgasdr
IOhannes
_______________________________________________
Pd-dev mailing list
Pd-dev@lists.iem.at
https://lists.puredata.info/listinfo/pd-dev