4 ms·
How are you sandboxing users, so that they don't mess with your environment?
by minhajuddin 14y ago
How are you sandboxing users, so that they don't mess with your environment?
- smarx 14y agoMost of the sandboxing just comes from using embedded Lua and only whitelisting a small number of functions. We also do a little process-level isolation to prevent runaway processes.
- minhajuddin 14y agoNice, It would be awesome if one could get full capability of a programming language. I have been planning to build something like this but was stuck because of the sandboxing issue.
- rhizome 14y agoYou could spawn BSD jails, each subject to cpu, ram and disk quotas.
- tarr11 14y agoAgree - wouldn't an infinite loop take down your site?
- tlrobinson 14y agoFrom the sibling comment: "We also do a little process-level isolation to prevent runaway processes."
- smarx 14y agoGive it a try. :-) We kill runaway processes after 10 seconds.