1. Forum
  2. Newsgroups
  3. comp.lang.awk

  • Gawk's --sandbox option?

    From mack@mack@the-knife.org (Mack The Knife) to comp.lang.awk on Sun Jun 21 19:08:09 2026
    From Newsgroup: comp.lang.awk

    Just wondering. According to the manual:

    -S
    --sandbox
    Disable the system() function, input redirections with
    getline, output redirections with print and printf,
    and dynamic extensions. Also, disallow adding file
    names to ARGV that were not there when gawk started
    running. This is particularly useful when you want to
    run awk scripts from questionable sources and need to
    make sure the scripts can’t access your system (other
    than the specified input data files).

    Has anyone ever used this for a real application?

    Thanks.
    --- Synchronet 3.22a-Linux NewsLink 1.2