h3n3/cadhub
1
0
Fork 0
Code Issues 35 Pull Requests Packages Projects Releases Wiki Activity

python execute security #611

New Issue
Open
opened 2022-07-17 04:54:50 +02:00 by Irev-Dev · 4 comments
Irev-Dev commented 2022-07-17 04:54:50 +02:00 (Migrated from github.com)
Copy Link

Python execute has been disabled for the time being.

Since python is a general purpose language getting security right is trick, the way it currently runs it would be possible to grab some aws credentials, as well as other things like crypto mining, the 30s execute limit does help but does not fix the problem.

Much more robust tracing and limits are needed before enabling this feature again.

Python execute has been disabled for the time being. Since python is a general purpose language getting security right is trick, the way it currently runs it would be possible to grab some aws credentials, as well as other things like crypto mining, the 30s execute limit does help but does not fix the problem. Much more robust tracing and limits are needed before enabling this feature again.
😕 1
jdegenstein commented 2022-08-06 00:05:49 +02:00 (Migrated from github.com)
Copy Link

Just doing some quick research on how to secure python execution and thought I would leave this here for consideration:

https://github.com/zopefoundation/RestrictedPython

Just doing some quick research on how to secure python execution and thought I would leave this here for consideration: https://github.com/zopefoundation/RestrictedPython
Irev-Dev commented 2022-08-06 10:13:00 +02:00 (Migrated from github.com)
Copy Link

Thanks @jdegenstein

Thanks @jdegenstein
42sol-eu commented 2022-12-08 21:08:45 +01:00 (Migrated from github.com)
Copy Link

Anything new on that?

Anything new on that?
notthewave commented 2024-01-15 15:58:15 +01:00 (Migrated from github.com)
Copy Link

What about using web assembly? I am certainly not an expert when it comes to web development but it might work for this use case:
https://webassembly.org/docs/security/
https://github.com/pyodide/pyodide

What about using web assembly? I am certainly not an expert when it comes to web development but it might work for this use case: https://webassembly.org/docs/security/ https://github.com/pyodide/pyodide
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
h3n3
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: h3n3/cadhub#611
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?