From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3966 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: Re: Squirrel - no-bloat scripting language with sane syntax and semantics Date: Mon, 26 Aug 2013 19:59:12 -0400 Message-ID: <20130826235911.GF20515@brightrain.aerifal.cx> References: <1377555523.2737.129@driftwood> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1377561566 15801 80.91.229.3 (26 Aug 2013 23:59:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 26 Aug 2013 23:59:26 +0000 (UTC) Cc: Justin Cormack To: musl@lists.openwall.com Original-X-From: musl-return-3970-gllmg-musl=m.gmane.org@lists.openwall.com Tue Aug 27 01:59:26 2013 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1VE6gv-0006xS-B7 for gllmg-musl@plane.gmane.org; Tue, 27 Aug 2013 01:59:25 +0200 Original-Received: (qmail 24350 invoked by uid 550); 26 Aug 2013 23:59:24 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 24342 invoked from network); 26 Aug 2013 23:59:24 -0000 Content-Disposition: inline In-Reply-To: <1377555523.2737.129@driftwood> User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:3966 Archived-At: On Mon, Aug 26, 2013 at 05:18:43PM -0500, Rob Landley wrote: > On 08/25/2013 10:03:33 AM, Justin Cormack wrote: > >On Sun, Aug 25, 2013 at 10:34 AM, Rob Landley wrote: > >> Normally people use lua for this, which has around 100k of > >interpreter. > >> > >> The downside of lua is it doesn't have a full standard posix C > >binding > >> library. (It has a nonstandard one you can add on, but when I > >looked at > >> writing a busybox clone in it, I needed to install something > >like 7 packages > >> to get all the libraries I needed. Then again, most people aren't > >> implementing their own "ifconfig", "mount", and "taskset"...) > > > >I have implemented ifconfig, mount etc in Lua (the APIs, not the > >commands), see https://github.com/justincormack/ljsyscall - its pretty > >comprehensive now. > > While nice, this is another library that's not included in the base > lua package. A library to implement raw system call bindings, which The whole point of lua is to be an embeddable language, the key prerequisite for which is that it does not give the embedded script access to the host application or system. From a security standpoint, the way lua does it (nothing available by default; application must provide anything it wants to provide) is the only way that's even tolerable. I agree this makes lua less convenient for many purposes, but it makes it basically the only choice for its original advertised purpose. Rich