RetroBBS - comp.lang.tcl - Apache Rivet filesystem access

Apache Rivet filesystem access

<nnd$61cd263e$4cbb4ce1@dadef10edfecd4b0>

https://www.rocksolidbbs.com/devel/article-flat.php?id=21693&group=comp.lang.tcl#21693

From: michael@niehren.de (Michael Niehren)
Subject: Apache Rivet filesystem access
Newsgroups: comp.lang.tcl
Reply-To: michael@niehren.de
Date: Mon, 10 Apr 2023 09:34:40 +0200
User-Agent: KNode/0.10.9
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Message-ID: <nnd$61cd263e$4cbb4ce1@dadef10edfecd4b0>
Organization: www.abavia.com
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!feeder1.feed.usenet.farm!feed.usenet.farm!peer01.ams4!peer.am4.highwinds-media.com!news.highwinds-media.com!feed.abavia.com!abe004.abavia.com!abp002.abavia.com!reseller!not-for-mail
Lines: 17
Injection-Date: Mon, 10 Apr 2023 09:34:40 +0200
Injection-Info: reseller; mail-complaints-to="abuse@abavia.com"
X-Received-Bytes: 1127

by: Michael Niehren - Mon, 10 Apr 2023 07:34 UTC

Hi together,

i've installed Rivet on my server and played around with it.
Great work, so now i can serve my websites with tcl.

I see one issue. If i installed Rivet on an multi domain hosting
webserver, i got permissions to the hole underlying filesystem
over tcl (/etc/passwd, other config files, ...), which should be
strongly restricted.

In the documentation i did not find something simimlar like PHP's
open_basedir to restrict access. Does anyone has an idea how to
archive this ?

best regards
Michael

Polymer physicists are into chains.

devel / comp.lang.tcl / Apache Rivet filesystem access

devel / comp.lang.tcl / Apache Rivet filesystem access

Subject	Author
Apache Rivet filesystem access	Michael Niehren