Am Donnerstag, den 15.03.2012, 11:23 -0700 schrieb Alfredo64:
> What do you mean?

Make an OS-level sandbox per user. Put node installations in the
sandboxes.


> El jueves 15 de marzo de 2012 18:30:58 UTC+1, Jann Horn escribió:
> >
> > Am Donnerstag, den 15.03.2012, 09:19 -0700 schrieb Alfredo64:
> > > Hello, i'm making a node.js public sandbox, something like codepad for 
> > > Javascript. I'm running a VM with debian and i call node via ssh sendind 
> > > the script to be ran. The problems i'm having is that i've tried the 
> > > Sandbox module, but it doesn't allow for node modules or functions. I 
> > want 
> > > to whitelist modules and add custom ones. What i plan to do is scan the 
> > > user script for "requires( something) " and only allow the whitelisted 
> > > modules.
> > > Can someone hint me on the chrooting of this? Will it be enough?
> > > Thanks
> >
> > Use real sandboxing (outside of node).
> >
> 

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to