Re: glob in Safe compartment allows shell access

I've moved the glob op into the same opcode tag as backticks and system
and added a comment.

diff --git a/ext/Opcode/Opcode.pm b/ext/Opcode/Opcode.pm
index c2dd414..1714c48 100644 (file)
--- a/ext/Opcode/Opcode.pm
+++ b/ext/Opcode/Opcode.pm
@@ -393,8 +393,6 @@ These are a hotchpotch of opcodes still waiting to be considered
 
     bless -- could be used to change ownership of objects (reblessing)
 
-    glob
-
     pushre regcmaybe regcomp subst substcont
 
     sprintf prtf -- can core dump
@@ -495,6 +493,8 @@ information about your system but not be able to change it.
 
     wait waitpid
 
+    glob -- access to Cshell via <`rm *`>
+
 =item :ownprocess
 
     exec exit kill