[Help-smalltalk] Sandboxing gnu-smalltalk

[jepri]

Hi,
	I have a need to run untrusted smalltalk code.  I would like to be able 
to do this by running smalltalk with a command line switch that would 
tell the VM not to call any functions that could touch the filesystem.

Even better would be if I could make an exception to this rule for the 
code-change log file.

Reading through the documentation I didn't see anything about 
sandboxing.  If there hasn't been any work on this, is this something I 
could easily do, or add?  I can program a bit of C, but don't know much 
about VMs.

If it was just mechanically tracking down every possible call that could 
 affect the system, that I could probably do.

TIA,
Jeremy