Sandboxing Lua Code

[v-rob]

So, Mesecons has the luacontroller which can run Lua code, but it has protections against things like infinite loops/recursion, memory usage, io/os function calls, and program execution time. How does it protect against these, and how could I do the same thing?

Essentially, I want to have user-inputted Lua code that is sandboxed against malicious code as to not crash servers.

[wziard]

Use the source, luke!

https://github.com/minetest-mods/meseco ... r/init.lua

I'm not yet really fluent enough in lua to understand everything that's going on there so I can't really tell you how I think it works, because I might be wrong. But if you want to use it you'll have to learn how it works yourself anyway. Slog through that init.lua , looking up everything you don't understand. Then you know how it works. Then you can use it.

[ShadMOrdre]

wziard, this is classic advise.

Use the source, luke!

v-rob,

Other examples to look at are Micus' micupack mod, and the Digilines mods.

micupack, IIRC, has a sandboxed Lua controller. The varous Digilines mods also have interaction with the mesecons controller, and include their own brand of controller.

As wziard said, lots of code reading.....and May the Source be with you!

[micu]

Hello all,

Sorry to answer a topic that is almost a month old, but I had to correct one thing about my modpack:

micupack, IIRC, has a sandboxed Lua controller.

I can't take any credit for that - this is Joe7575's modpack Techpack that has such computer (please check safer_lua and sl_controller sources).

Cheers!
Micu

[ShadMOrdre]

Micu,

Thank you for clarifying this info. I hope v-rob can find what he's looking for.