+1 for running interpreter process in docker container.


Jongyoul Lee <jongy...@gmail.com>于2017年12月1日周五 下午3:36写道:

> Yes, exactly, this is not only the shell interpreter problem, all can run
> any script through python and Scala. Shell is just an example.
>
> Using docker looks good but it cannot avoid unindented usage of resources
> like mining coin.
>
> On Fri, Dec 1, 2017 at 2:36 PM, Felix Cheung <felixcheun...@hotmail.com>
> wrote:
>
> > I don’t think that’s limited to the shell interpreter.
> >
> > You can run any arbitrary program or script from python or Scala (or
> java)
> > as well.
> >
> > _____________________________
> > From: Jeff Zhang <zjf...@gmail.com>
> > Sent: Wednesday, November 29, 2017 4:00 PM
> > Subject: Re: [DISCUSS] Change some default settings for avoiding
> > unintended usages
> > To: <dev@zeppelin.apache.org>
> > Cc: users <us...@zeppelin.apache.org>
> >
> >
> >
> > Shell interpreter is a black hole for security, usually we don't
> recommend
> > or allow user to use shell.
> >
> > We may need to refactor the shell interpreter, running under zeppelin
> user
> > is too dangerous.
> >
> >
> >
> >
> >
> > Jongyoul Lee <jongy...@gmail.com>于2017年11月29日周三 下午11:44写道:
> >
> > > Hi, users and dev,
> > >
> > > Recently, I've got an issue about the abnormal usage of some
> > interpreters.
> > > Zeppelin's users can access shell by shell and python interpreters. It
> > > means all users can run or execute what they want even if it harms the
> > > system. Thus I agree that we need to change some default settings to
> > > prevent this kind of abusing situation. Before we proceed to do it, I
> > want
> > > to listen to others' opinions.
> > >
> > > Feel free to reply this email
> > >
> > > Regards,
> > > Jongyoul
> > >
> > > --
> > > 이종열, Jongyoul Lee, 李宗烈
> > > http://madeng.net
> > >
> >
> >
> >
>
>
> --
> 이종열, Jongyoul Lee, 李宗烈
> http://madeng.net
>

Reply via email to