🚀 go-pugleaf

In article <9008142236.AA18311@nada.kth.se> maguire@NADA.KTH.SE (Gerald Maguire) writes:
>which could change the state of the system as "safe" operators - which
>could trap to a handler, rather than perform the operation (for
>example "rm" and write operations). 

I may be slow, but why would a mail message need to "rm" a file at all?
If you are talking about things like what we use "shar"s for now,
I would think it would be possible to make a format that would need to
be interpreted by a user-trusted program (like unshar) to unpack such things.
If you mean things to give arbitrary output (like Postscript does), 
I fail to see any need for `security' there either: the Postscript interpreter
in my laser printer is totally incapable of deleteing any of my files.
A simple solution to the problem would be to design the multi-mail format
to contain no embedded filenames. Hence, any operation to be done to
any file must prompt the user for a filename (at least). Or am I totally
off-base?                   -- Darren

-- 
--- Darren New --- Grad Student --- CIS --- Univ. of Delaware ---