On Mon, 8 May 2000, Henrik Gedenryd wrote:

> >> BTW, how do you all feel about adding a "-secure" option to the VM which
> >> would enable the file sandbox even if not run as plugin?
> >> Lately, there are
> >> ..morphs and other stuff sent around which could do much harm to anyone's
> >> disk.> 
> 
> > I think, it's a good idea.  Not only for Unix but for every platform.
> 
> I think this is a great idea since it still allows everything in the image
> directory to work as usual.

Okay, I'll put it in my Unix VM. To be announced soon ;-)

> Would it not be an idea if fileIn:s (by default) were run in the secure
> mode? 

There's no way to selectively disable the file sandbox from the
image. That's why it's secure. We might add an option to enable it, but
this would stay in effect until squeak is restarted.

What you suggest would be an application for an in-image sandbox like the
recently discussed "capabilities".

-- Bert