- Pharo-dev - lists.pharo.org

Re: [Pharo-project] FFI inside Pharo ?

by John M McIntosh

Ah well security. So the view is it would be nice to have Alien/FFI in the image & VM so you can execute any operating system API you've rights to execute. This enables folks to write smalltalk code and exploit operating system features without having to rely on the difficult procedure of creating a plugin and setting up a platform development environment. It also provides for better support since changes can be done by someone submitting a fix to MC somewhere, versus relying on a handful of people who do the plugin development. I personally think this is a good idea if I ignore everything written below. Now once you allow the loading of arbitrary, non-signed, mystery code from the internet you have the following: (a) well obviously a script has full user read/write access to the file systems & network just using native squeak. The squeak sandboxing attempts to limit that but can be defeated and in my audit of the squeak platform api's it's obvious most platforms consider primitive callers to be friendly and not attempt nasty things like buffer overflows or do other devious things. No doubt any serious effort at exploitation would defeat the current sandboxing. (b) Enabling FFI then allows the script to do lots more, likely also exploit privilege escalation exploits etc, run arbitrary binaries etc. Which is the problem Michael refers to. I'm not about to go anywhere near proposing any solutions since this entire topic has had billions of $ spent on solving it. On 29-Nov-08, at 12:06 PM, StÃ©phane Ducasse wrote: > Mike > > could you explain a bit more the scenario. > would the people have to add a dll? > > Stef > > On Nov 29, 2008, at 10:25 AM, Michael Rueger wrote: > >> Marcus Denker wrote: >>> I personally think that a good FFI is base fuctionality, e.g. it >>> allows to >>> move glue-code into the image that normally would be in primitives. >> >> The problem with FFI (and Alien) is that by using FFI and thus >> having the FFI plugin installed you completely circumvent any >> security you gain from the sandbox. >> This is only really interesting for an environment like etoys where >> you allow arbitrary scripts to be loaded. Right now we are not >> supporting etoys, but the question is what, down the road, is going >> to happen. >> >> Another question is how more use of FFI opens us up to issues other >> languages have. So far Smalltalk wasn't hackable (on the server), >> with FFI generally available it could be? >> >> If people vote this a non-issue I'm fine with it, but I wanted at >> least to raise the issue at hand. >> >> Michael -- = = = ======================================================================== John M. McIntosh <johnmci(a)smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com = = = ========================================================================

Nov. 30, 2008

[Pharo-project] Re: FileList2 merged with FileList

by HernÃ¡n Morales Durand

I forgot to mention, to install it: -Remove the Morphic-FileList category. -Evaluate: FileStream fileIn: 'Morphic-FileList.st'. FileStream fileIn: 'FileListNewReferences.st' 2008/11/29 HernÃ¡n Morales Durand <hernan.morales(a)gmail.com> > Issue 269: > http://code.google.com/p/pharo/issues/detail?id=269&q=FileList2&colspec=ID%… > > Attachements: > Morphic-FileList.st contains FileList merged from old FileList and > FileList2 > Removed FileList2 references in FileListNewReferences.st > > Two issues: > -It is possible to establish a preference for saving a method without > modification of the authorship/annotation information ? > -Why methods have authors but classes don't ? > > Cheers > > HernÃ¡n > >

Nov. 29, 2008

[Pharo-project] FileList2 merged with FileList

by HernÃ¡n Morales Durand

Issue 269: http://code.google.com/p/pharo/issues/detail?id=269&q=FileList2&colspec=ID%… Attachements: Morphic-FileList.st contains FileList merged from old FileList and FileList2 Removed FileList2 references in FileListNewReferences.st Two issues: -It is possible to establish a preference for saving a method without modification of the authorship/annotation information ? -Why methods have authors but classes don't ? Cheers HernÃ¡n

Nov. 29, 2008

Re: [Pharo-project] New pharo-dev based on 10178

by Marcus Denker

On 27.11.2008, at 19:42, Stefan Schmiedl wrote: > On Thu, 27 Nov 2008 17:48:33 +0100 > "Damien Cassou" <damien.cassou(a)gmail.com> wrote: > >> https://gforge.inria.fr/frs/download.php/11845/pharo0.1-10178dev08.11.7.zip >> > > downloaded, started and performed my usual "stress test" > (what happens when I click there?). > > There are two "World" menus: the one coming up on left click on > background > and the "other" one coming up on middle/right click depending on > mouse settings. > We should remove this second world-menu. > The "other" world menu has an item "show main docking bar (M)", > turning it on results in a walkback: > > AnObsoleteBlueSmallLandColorTheme>>dockingBarColor should have > been implemented. Here is a fix. But the docking-bar needs some work in general... lots of things are accessible in the menues that should be removed. > > > The window look (Watery2) is quite slick ... so very non-squeaky :-) :-) -- Marcus Denker -- denker(a)iam.unibe.ch http://www.iam.unibe.ch/~denker

Nov. 29, 2008

[Pharo-project] polymorph UI glitch

by StÃ©phane Ducasse

When I enlarged the window I got that.

Nov. 29, 2008

Re: [Pharo-project] FFI inside Pharo ?

by StÃ©phane Ducasse

Mike could you explain a bit more the scenario. would the people have to add a dll? Stef On Nov 29, 2008, at 10:25 AM, Michael Rueger wrote: > Marcus Denker wrote: >> I personally think that a good FFI is base fuctionality, e.g. it >> allows to >> move glue-code into the image that normally would be in primitives. > > The problem with FFI (and Alien) is that by using FFI and thus > having the FFI plugin installed you completely circumvent any > security you gain from the sandbox. > This is only really interesting for an environment like etoys where > you allow arbitrary scripts to be loaded. Right now we are not > supporting etoys, but the question is what, down the road, is going > to happen. > > Another question is how more use of FFI opens us up to issues other > languages have. So far Smalltalk wasn't hackable (on the server), > with FFI generally available it could be? > > If people vote this a non-issue I'm fine with it, but I wanted at > least to raise the issue at hand. > > Michael > > > _______________________________________________ > Pharo-project mailing list > Pharo-project(a)lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project >

Nov. 29, 2008

Re: [Pharo-project] Bug when loading Seaside in 10178

by StÃ©phane Ducasse

Apparently this is a problem with PSUIManager thisContext trick. We ended up with MCdefinitino compared using = with World. Stef On Nov 29, 2008, at 2:52 PM, Damien Pollet wrote: > Just loading Seaside 2.8a1 in pharo (core or dev, using universes or > MC) 10178, we get a strange from PSUIManager >> modalMorphâ¦ not clear > if it's pharo or MC or Seaside's faultâ¦ > > -- > Damien Pollet > type less, do more [ | ] http://people.untyped.org/damien.pollet > _______________________________________________ > Pharo-project mailing list > Pharo-project(a)lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project

Nov. 29, 2008

Re: [Pharo-project] FFI inside Pharo ?

by John M McIntosh

On 29-Nov-08, at 1:14 AM, Marcus Denker wrote: > > On 28.11.2008, at 12:35, Antony Blakey wrote: > >> >> On 28/11/2008, at 9:43 PM, Damien Cassou wrote: >> >>> On Fri, Nov 28, 2008 at 12:07 PM, Igor Stasenko >>> <siguctua(a)gmail.com> wrote: >>>> May i guess, that dev image should contain FFI package by default? >> >> Has there been any discussion about using Alien exclusively as a >> Pharo goal? > > > No discussion really, but I think this would be nice. > > I personally think that a good FFI is base fuctionality, e.g. it > allows to > move glue-code into the image that normally would be in primitives. > > Now Alien does only support intel... so it's not there yet, even > though there > has been lots of progress (very nice!). Er so what else is missing, I do hope to complete the powerpc work this week. -- = = = ======================================================================== John M. McIntosh <johnmci(a)smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com = = = ========================================================================

Nov. 29, 2008

[Pharo-project] methodChanged: bug

by StÃ©phane Ducasse

Hi guys When you remove an Trait from the use: clause you get an DNU because the item in anEvent item is nil. It would be good to fix that. Stef methodChanged: anEvent | cls sel | "cls contains the class in which the method sel has been modified" cls := anEvent item methodClass. (cls inheritsFrom: TestCase) ifFalse: [^ self]. "sel contains the method name that has been modified" sel := anEvent item selector. "this selector has to be a test" (sel beginsWith: 'test') ifFalse: [^ self]. " remove sel from the known test results" TestResult removeFromTestHistory: sel in: cls.

Nov. 29, 2008

Re: [Pharo-project] FFI inside Pharo ?

by David Pennell

+1 On Nov 29, 2008, at 3:14 AM, Marcus Denker <denker(a)iam.unibe.ch> wrote: > > On 28.11.2008, at 12:35, Antony Blakey wrote: > >> >> On 28/11/2008, at 9:43 PM, Damien Cassou wrote: >> >>> On Fri, Nov 28, 2008 at 12:07 PM, Igor Stasenko >>> <siguctua(a)gmail.com> wrote: >>>> May i guess, that dev image should contain FFI package by default? >> >> Has there been any discussion about using Alien exclusively as a >> Pharo goal? > > > No discussion really, but I think this would be nice. > > I personally think that a good FFI is base fuctionality, e.g. it > allows to > move glue-code into the image that normally would be in primitives. > > Now Alien does only support intel... so it's not there yet, even > though there > has been lots of progress (very nice!). > > So one idea could be to have both for now... and replace the old as > soon as > Alien is ready. > > Marcus > > -- > Marcus Denker -- denker(a)iam.unibe.ch > http://www.iam.unibe.ch/~denker > > > _______________________________________________ > Pharo-project mailing list > Pharo-project(a)lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project

Nov. 29, 2008