On 20 Sep 2013 21:14, Jabba Laci jabba.l...@gmail.com wrote:
That last seems to me to be the biggie. Several times in the past few
years, people in this mailing list have tried to build a safe sandbox.
And each one was a big failure, for a hacker of sufficient interest.
Some of them were
On 9/23/13 8:33 AM, Fábio Santos wrote:
On 20 Sep 2013 21:14, Jabba Laci jabba.l...@gmail.com
mailto:jabba.l...@gmail.com wrote:
That last seems to me to be the biggie. Several times in the past few
years, people in this mailing list have tried to build a safe sandbox.
And each one
If you want to run untrusted Python code and prevent malice (or stupidity)
from harming you, you need OS-level protection.
Agreed. Just for fun here's a simple example of what could be an honest
mistake
that consumes all physical memory and swap. A well behaved kernel will kill
the
process
On 09/23/2013 06:20 AM, Ned Batchelder wrote:
snip
If you want to run untrusted Python code and prevent malice (or stupidity) from
harming you, you
need OS-level protection.
--Ned.
That reminds me of the quote from Albert Einstein, (paraphrased):
There are only two things that are
On Fri, Sep 20, 2013 at 11:28 AM, Jabba Laci jabba.l...@gmail.com wrote:
Hi,
In our school I have an introductory Python course. I have collected a
large list of exercises for the students and I would like them to be
able to test their solutions with an online judge (
On 9/21/13 3:57 PM, Jabba Laci wrote:
Hi Ned,
Could you please post here your AppArmor profile for restricted Python scripts?
Laszlo, the instructions are in the README, including the AppArmor
profile. It isn't much:
#include tunables/global
SANDENV/bin/python {
#include
Hi Ned,
Could you please post here your AppArmor profile for restricted Python scripts?
Thanks,
Laszlo
On Sat, Sep 21, 2013 at 12:46 AM, Ned Batchelder n...@nedbatchelder.com wrote:
On 9/20/13 6:26 PM, Jabba Laci wrote:
I just found Docker ( http://docs.docker.io/en/latest/faq/ ). It seems
Hi,
In our school I have an introductory Python course. I have collected a
large list of exercises for the students and I would like them to be
able to test their solutions with an online judge (
http://en.wikipedia.org/wiki/Online_judge ). At the moment I have a
very simple web application that
However, it can only be used with programs that produce an output
Just interested, what else are you thinking of checking?
--
https://mail.python.org/mailman/listinfo/python-list
Let's take this simple exercise:
Write a function that receives a list and decides whether the list is
sorted or not.
Here the output of the function is either True or False, so I cannot
test it with my current method.
Laszlo
On Fri, Sep 20, 2013 at 7:57 PM, Aseem Bansal asmbans...@gmail.com
In mailman.196.1379702349.18130.python-l...@python.org Jabba Laci
jabba.l...@gmail.com writes:
Let's take this simple exercise:
Write a function that receives a list and decides whether the list is
sorted or not.
Here the output of the function is either True or False, so I cannot
test it
That last seems to me to be the biggie. Several times in the past few
years, people in this mailing list have tried to build a safe sandbox.
And each one was a big failure, for a hacker of sufficient interest.
Some of them were spectacular failures.
If you have to be safe from your user,
In mailman.195.1379698177.18130.python-l...@python.org Jabba Laci
jabba.l...@gmail.com writes:
There are several questions:
* What is someone sends an infinite loop? There should be a time limit.
You could run the judge as a background process, and kill it after ten
seconds if it hasn't
On 9/20/2013 4:04 PM, Jabba Laci wrote:
That last seems to me to be the biggie. Several times in the past few
years, people in this mailing list have tried to build a safe sandbox.
And each one was a big failure, for a hacker of sufficient interest.
Some of them were spectacular failures.
If
I just found Docker ( http://docs.docker.io/en/latest/faq/ ). It seems
sandboxing could be done with this easily.
Laszlo
On Fri, Sep 20, 2013 at 10:08 PM, John Gordon gor...@panix.com wrote:
In mailman.195.1379698177.18130.python-l...@python.org Jabba Laci
jabba.l...@gmail.com writes:
There
On 9/20/13 6:26 PM, Jabba Laci wrote:
I just found Docker ( http://docs.docker.io/en/latest/faq/ ). It seems
sandboxing could be done with this easily.
At edX, I wrote CodeJail (https://github.com/edx/codejail) to use
AppArmor to run Python securely.
For grading Python programs, we use a
On 20/9/2013 13:28, Jabba Laci wrote:
Hi,
In our school I have an introductory Python course. I have collected a
large list of exercises for the students and I would like them to be
able to test their solutions with an online judge (
http://en.wikipedia.org/wiki/Online_judge ). At the
17 matches
Mail list logo
