h3n3/cadhub
Watch
1
0
Fork
You've already forked cadhub
 0
Code Issues 35 Pull requests Projects Releases Packages Wiki Activity Actions

python execute security #611

New issue
Open
opened 2022-07-17 04:54:50 +02:00 by h3n3 · 4 comments
h3n3 commented 2022-07-17 04:54:50 +02:00 (Migrated from gitea.opdethuisserver.nl)
Copy link

Python execute has been disabled for the time being.

Since python is a general purpose language getting security right is trick, the way it currently runs it would be possible to grab some aws credentials, as well as other things like crypto mining, the 30s execute limit does help but does not fix the problem.

Much more robust tracing and limits are needed before enabling this feature again.

Python execute has been disabled for the time being. Since python is a general purpose language getting security right is trick, the way it currently runs it would be possible to grab some aws credentials, as well as other things like crypto mining, the 30s execute limit does help but does not fix the problem. Much more robust tracing and limits are needed before enabling this feature again.
😕 1
h3n3 commented 2022-08-06 00:05:49 +02:00 (Migrated from gitea.opdethuisserver.nl)
Copy link

Just doing some quick research on how to secure python execution and thought I would leave this here for consideration:

https://github.com/zopefoundation/RestrictedPython

Just doing some quick research on how to secure python execution and thought I would leave this here for consideration: https://github.com/zopefoundation/RestrictedPython
h3n3 commented 2022-08-06 10:13:00 +02:00 (Migrated from gitea.opdethuisserver.nl)
Copy link

Thanks @jdegenstein

Thanks @jdegenstein
h3n3 commented 2022-12-08 21:08:45 +01:00 (Migrated from gitea.opdethuisserver.nl)
Copy link

Anything new on that?

Anything new on that?
h3n3 commented 2024-01-15 15:58:15 +01:00 (Migrated from gitea.opdethuisserver.nl)
Copy link

What about using web assembly? I am certainly not an expert when it comes to web development but it might work for this use case:
https://webassembly.org/docs/security/
https://github.com/pyodide/pyodide

What about using web assembly? I am certainly not an expert when it comes to web development but it might work for this use case: https://webassembly.org/docs/security/ https://github.com/pyodide/pyodide
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
release
kurt/serverless-migration
kurt/live-customizer-attempt
kurt/github-app-303
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
h3n3/cadhub#611
No description provided.