[3448] in java-interest
Re: Re[2]: Viruses, Deleting Files in Java?
daemon@ATHENA.MIT.EDU (Ken Arnold - Sun Labs)
Mon Nov 13 14:27:55 1995
Date: Mon, 13 Nov 1995 09:59:13 -0500
From: arnold@cocolat.East.Sun.COM (Ken Arnold - Sun Labs)
To: Horlock.Neil.@.ext06lon@ft.com
Cc: java-interest@webrunner.neato.org
You mention that an applet may only (currently) remove files by
using an exec command. How does Java protect against this? I
know that the filesystem write permissions etc. are closely
guarded by Java but how does it protect against exec abuse?? Is
there a similar mechanism that prevents this??
Neil Horlck
Financial Times Information
horlock.neil@ft.com
There is distinction to make, and I guess I'm not being clear.
The java.io.File class doesn't have any method to remove files or
directories. This is being remedied. Until it is, you can remove
files only by writing a native method or by using exec("rm ...").
*Neither* technique will work with APPLETS. They will only work for
APPLICATIONS written in Java. Applets live in a strict security model
that prevents using either applet-specific native methods, or running
programs at the browser site. As you say, this would be very dangerous,
and so it isn't allowed.
Sorry for not being clear enough at first go 'round.
Ken Arnold
-
This message was sent to the java-interest mailing list
Info: send 'help' to java-interest-request@java.sun.com
