Safe-Tcl
E773899
Safe-Tcl is a restricted, security-focused subset of the Tcl scripting language designed to safely execute untrusted code.
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
Tcl extension
ⓘ
programming language subset ⓘ security mechanism ⓘ |
| basedOn | Tcl NERFINISHED ⓘ |
| category |
language-based security
ⓘ
sandboxed execution environment ⓘ scripting language security ⓘ |
| designedFor |
email-embedded scripts
ⓘ
mobile code ⓘ security-focused script execution ⓘ |
| executionModel |
trusted interpreter mediates privileged operations
ⓘ
untrusted code runs in restricted interpreter ⓘ |
| goal |
allow useful computation while preserving host safety
ⓘ
enable distribution of executable content with reduced risk ⓘ |
| hasFeature |
controlled access to host resources
ⓘ
mediated access to environment variables ⓘ mediated access to file system ⓘ mediated access to network ⓘ policy-based command exposure ⓘ restricted command set ⓘ safe interpreters ⓘ separation of trusted and untrusted interpreters ⓘ |
| hasInfluenceOn | design of safe interpreters in Tcl core ⓘ |
| hasPrimaryPurpose |
restricting dangerous operations
ⓘ
safe execution of untrusted code ⓘ sandboxing scripts ⓘ |
| hasSecurityProperty |
enforces sandbox boundaries
ⓘ
limits side effects of untrusted scripts ⓘ prevents direct execution of dangerous Tcl commands ⓘ supports fine-grained capability control ⓘ |
| implementedAs |
Tcl library mechanisms
ⓘ
interpreter configuration ⓘ |
| programmingLanguage | Tcl NERFINISHED ⓘ |
| relatedTo |
Tcl safe interpreters
NERFINISHED
ⓘ
email security ⓘ mobile code security ⓘ sandboxing ⓘ |
| restrictionType |
I/O restrictions
ⓘ
command-level restrictions ⓘ resource access restrictions ⓘ |
| supportsConcept |
command aliasing for controlled access
ⓘ
master interpreter controlling untrusted code ⓘ safe slave interpreters ⓘ security policies implemented in Tcl ⓘ |
| usedIn |
email systems
ⓘ
mobile agent frameworks ⓘ safe scriptable applications ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.