Is it possible to roll your own "safeopen" function? I'm not sure, but wouldn't an OO module incorporating the FileHandle module do the trick? s/earch/and replace/ all filehandle statements to point to the OO code instead.

Then you can parse all paths/files and maybe stat them to find out who owns them before allowing/disallowing access.

.02

cLive ;-)