[tcljava-dev] security of tcljava

[<fan...@ya...>]

I am planning to use tcl(java) in my email system to allow users to write their own email filters in tcl,and maybe the tcl filter can be shared among the users.Is it a good idea? Or is there any email system that has implemented it?
 
But the security is an issue.I don't want to allow a none-privileged user to open files,execute unix commands,open socket,make stack overflow and so on.That is,I'd like to make the tcl filters written by a none-privileged user run in a "sand box",only with limited tcl commands,while a system tcl filter can do anything in a traditional way if it is authorized.
 
How can do that?
 



---------------------------------
Do You Yahoo!?
完全免费的雅虎电邮，马上注册获赠额外60兆网络存储空间