Beefy Boxes and Bandwidth Generously Provided by pair Networks
No such thing as a small change

Re: Known security issues with

by AgentM (Curate)
on Jan 31, 2001 at 00:49 UTC ( #55355=note: print w/replies, xml ) Need Help??

in reply to Known security issues with

You might try a simple server architecture, which depending on your needs, may be truly-threaded or simply forked. Runaway processes can be easily STOPped or KILLed if your server is paying attention. Invoking a forked process prepended with the "nice" command is certainly an option. Using SIGALRM is generally a bad idea for any security considerations. You could also give the "modified" interpreter a separate user or group in which you can set limits of quota, swap usage, CPU time and system time. That's sounds like alot of encapsulation for an untrusted user who would have access to your system. Is it really worth it? Under the best circumstances, you'd probably need a separate computer to guarantee the safety of your own stuff. The unltimate answer depends on how much you can trust your users or how much you are able to track them (Which libs should they not have access to, etc.) If you need more help, or if you want Olga to call, just reply below...
AgentM Systems nor Nasca Enterprises nor Bone::Easy nor Macperl is responsible for the comments made by AgentM. Remember, you can build any logical system with NOR.
  • Comment on Re: Known security issues with

Replies are listed 'Best First'.
Re: Re: Known security issues with
by Fastolfe (Vicar) on Jan 31, 2001 at 00:51 UTC
    Exactly. I'm just trying to get a full feel for my options here and weigh that against the risk I'm willing to assume. Forking off a new process seems like another good alternative as far as compartmentalizing the code, leaving the parent running and able to watch over it.

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://55355]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others examining the Monastery: (5)
As of 2021-08-03 19:50 GMT
Find Nodes?
    Voting Booth?
    My primary motivation for participating at PerlMonks is: (Choices in context)

    Results (40 votes). Check out past polls.