On Monday, June 22, 2015 at 12:21:03 PM UTC-7, 黄祥 wrote:
>
> @dave,
> do you have any suggestion for safer method in case the student tries 
> something dangerous or malicious?
>
>
On Linux, chroot would help, and using a container (e.g., Docker) for the 
sandbox would probably be better, but I don't have experience with either 
when launching from web2py or python.  With Docker, you might be able to 
have a pre-configured setup, copy the c-file somewhere findable, and let 
the Docker instance load it from there.

A more extreme technique would be to have a VM running, do the appropriate 
security preparations in the VM, and scp the file to it.

I am not familiar with sandbox techniques on Windows, other than a VM 
instance.

/dps


-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to