PythonMonk – Learn Python in the browser

Re:PythonMonk – Learn Python in the browser by emillon on Thursday April 04, 2013 @06:38PM (#5495741)

Execv'ing processes is OK as long as you don't fork:

    __import__("os").execv("/usr/bin/uname", ["uname", "-a"])
    Linux ip-10-196-3-111 2.6.32-amazon-xen-r3 #1 SMP Mon Jan 16 21:03:16 PST 2012 i686 GNU/Linux

As for the actual files, there are a few clues that a chroot is created for every request : /proc is not mounted, /etc is minimal (root + 1 user in passwd) and "ls -id /" returns a new inode number every time.

[ Parent | on HN ]

Re:PythonMonk – Learn Python in the browser by tdinkar on Friday April 05, 2013 @02:34AM (#5497080)

Yeah, we are using chroot (along with other things) to sandbox things on a per request basis.

- Tejas from Team PythonMonk (I built the sandboxing stuff)

[ Parent | on HN ]