How to limit access to filesystem?

[bbuck]

If I wanted to "lockdown" the Lua thread running so that it only had access to a select number of files that are predetermined or determined by an outside source how would I go about doing so?

I can't seem to find any functions that would allow this behavior so the only course of action I can see is replacing loRequire with something else (reassigning that global) and removing the load* series and dofile methods.

Do you have a clean way to do this other than what my thoughts are?

Also, secondary, but you don't provide any examples of LUserData on the README, perhaps add some? As I become more familiar with this library, if you haven't done them already I'll see about doing it to help out.

[yuin]

Sandboxing in Lua has been discussed on web from a while before.
It is basically achieved by replacing unsafe functions with safe ones using setfenv( or simply assigning nil to global variables).
Please refer to following urls.

• lua-users wiki: Sand Boxes
• How can I create a secure Lua sandbox? - Stack Overflow
• kikito's sandbox.lua : works in GopherLua

Ok, I will write about LUserData to the README.

[bbuck]

Thanks for the quick reply, I'll check those links. Thanks for this library too! 👍

[yuin]

Ok, I will write about LUserData to the README.

I wrote it down here.

[bbuck]

Thanks for the information, I'll close this issue since you've provided a response to everything!