Not logged in
Log in now
Create an account
Subscribe to LWN
LWN.net Weekly Edition for May 16, 2013
A look at the PyPy 2.0 release
PostgreSQL 9.3 beta: Federated databases and more
LWN.net Weekly Edition for May 9, 2013
(Nearly) full tickless operation in 3.10
Would it be possible add "a run in sandbox" option, which allowed the macros to run but stopped them doing nefarious things that would otherwise be possible using the all powerful scripting language?
OpenOffice.org security concerns
Posted Aug 17, 2006 13:34 UTC (Thu) by kfiles (subscriber, #11628)
However, such code should be consciously installed by the user from standalone packages, not piggybacking on any document they open.
For document macros, a simple sand-boxed subset of features (those that can be used to automate changes in the document, perform field validation, etc.) makes more sense.
If a content provider wants a user to have more powerful macros installed, they should distribute those as a separate package, one which tells the user, e.g. "This package is requesting the ability to: change your security settings; modify files on your drive; decrypt your passwords; send email using your email client."
Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds