codejail
codejail copied to clipboard
openedx
Secure code execution
Hi, I followed the installation instructions but I keep getting this error: ``` SafeExecException: Couldn't execute jailed code: sudo: no tty present and no askpass program specified ``` Do you...
This code will run outside of a sandbox: ``` import codejail.jail_code import codejail.safe_exec codejail.jail_code.configure('python', '/home/pmitros/jail/jailbox/bin/python') codejail.safe_exec.safe_exec("import os\nos.system('ls /etc')", {}) ``` This code will run in a sandbox: ``` import codejail.jail_code...
On Ubuntu, sitecustomize.py is linked to /etc/python2.7/sitecustomize.py, which tries to import apport_python_hook. This fails due to the AppArmor profile, but I would rather not import it at all. I tried...
It isn't a great way to coordinate with Django, since it doesn't get invoked for manage.py commands. It isn't testable in this repo.
This repository is a depedency of edx-platform and needs to be upgraded to Python 3.11 before the Readwood release is cut (mid-April). - [ ] Requirements are compiled with Python...
If codejail is not configured with a user to run commands as, jailed code execution will fail. Effectively, this makes the `user` config option mandatory rather than optional. This probably...
Codejail has a global variable at `codejail.jail_code.COMMANDS`. It's a dictionary that maps command names (like `"python"`) to safe shell commands. An example value is: ```python {'python': {'cmdline_start': ['/edx/app/edxapp/venvs/edxapp-sandbox/bin/python', '-E', '-B'],...
Updated repo with setup.py changes for package extras, for more context please have a look into this [issue](https://github.com/edx/edx-arch-experiments/issues/386)
Couldn't execute jailed code: stdout: b'', stderr: b'sudo: /home/niraj/Workspace/codejail/sandbox/bin/: command not found\n' with status code: 1 Can any one share any video or steps, how to execute this?
