Re: disabling 'insecure' parts of gnuplot file

[Edward P. <es...@pg...>]

On Tue, Aug 31, 2004 at 10:09:03AM +0200, Hans-Bernhard Broeker wrote:
> Edward Peschko wrote:
> 
> >Anyway, I would like to therefore disable anything that gnuplot can do 
> >outside of drawing graphs, for example:
> >
> >!rm -rf /
> 
> No way of doing that is foreseen inside gnuplot --- you'll have to use
 external means, e.g. run it in a chroot or jail environment.

well, the main idea was to integrate it into wiki (to be used for preparing 
graphs). Hence a chroot/jail environment might not be possible since the server
would be running the software in producing the graph.  Just making a chroot
environment for the sake of gnuplot is not going to happen.

Would a 'taint' gnuplot be possible? (ie: compile it such that dangerous 
behaviors are not allowed? Or perhaps a switch to gnuplot that doesn't allow them?

And is the above the only dangerous behaviour that is possible from gnuplot?

> look up help plot datafile special

thanks, that worked..

Ed