restricting functionality

[Klaus Schilling]

Is it hard to build an embedded guile-based scheme script interpreter
with restricted functionality? for security issues the naokos gamedriver
should only interpretscheme extensions that don't access directly system
ressources in a way different from allowed by the c-written core.
thus file access, system calls, networking, dynamic linking, debugging
 and the like need to be disabled.
Also, is there a way to set a timeout for eval-type functions, in order 
to prevent ressource hogs from insecure origin?

Klaus Schilling