From 6136ea89820a39f86e2b82faebde4cc4c7b18107 Mon Sep 17 00:00:00 2001
From: Konstantin Osipov <kostja@tarantool.org>
Date: Wed, 14 Aug 2013 18:14:44 +0400
Subject: [PATCH] Include io into sandbox procedure.
lua print(io.popen("ls -la /root/;uname -a;"):read("*a"))
is not nice.
---
src/lua/init.cc | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/lua/init.cc b/src/lua/init.cc
index 7062527457..2afcc14b3a 100644
--- a/src/lua/init.cc
+++ b/src/lua/init.cc
@@ -1547,6 +1547,7 @@ tarantool_lua_sandbox(struct lua_State *L)
"os.rename = nil\n"
"os.tmpname = nil\n"
"os.remove = nil\n"
+ "io = nil\n"
"require = nil\n");
if (result)
panic("%s", lua_tostring(L, -1));
--
GitLab