[Rd] question

[Luke Tierney]

Erich Neuwirth wrote:
> here is another question (kurt already knows about it).
> i would like to do a client server version
> of R where the server can run on a unix box and the client
> is excel ond a win machine.
> the easiest solution would be running a stdin-stdout version
> of the server through inetd.
> but this is vulnerable.
> so what is needed is a sandbox version of the server,
> where no acrtive access to the file system is open
> and where spawning processes is disabled.
> are there any plans for doing such a version?
> 

You could have a look at some of the things Jeff Banfield did for Rweb
(http://www.math.montana.edu/Rweb).  He disabled some things to get a
moderate increase in security, but as Thomas and Peter said, you
really can't drop dyn.load and .C and with those more or less anything
is open to someone who knows what they are doing.

luke

-- 
Luke Tierney
University of Minnesota                      Phone:           612-625-7843
School of Statistics                         Fax:             612-624-8868
313 Ford Hall, 224 Church St. S.E.           email:      luke@stat.umn.edu
Minneapolis, MN 55455 USA                    WWW:  http://www.stat.umn.edu
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
r-devel mailing list -- Read http://www.ci.tuwien.ac.at/~hornik/R/R-FAQ.html
Send "info", "help", or "[un]subscribe"
(in the "body", not the subject !)  To: r-devel-request@stat.math.ethz.ch
_._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._