On 6/27/07, Michel <[EMAIL PROTECTED]> wrote: > On Jun 27, 11:24 am, "Timothy Clemans" <[EMAIL PROTECTED]> > wrote: > > The turning off net access all together for notebook is users is not a > > good idea, because there is database stuff in SAGE that uses web sites > > such as Sloane's database. > > Good point! But the firewall could be configured to allow only > specific host access > (which would of course still allow DOS attacks against those > hosts....) > Anyway I realize this is not a sage issue but a firewall issue.
Actually, it's not such a good point. The *public* sage notebook should indeed not allow any outgoing internet connections, e.g., the sloane stuff etc (and there is not much etc there). It's my computer, and the notebook is free, so placing arbitrary limitations on the functionality is very much reasonable. I can have another notebook server with accounts-by-request-only, which will be much more open (i.e., people who get accounts on that would also be people I would normally give local shell accounts to, with all that entails). I've planned to implement a firewall strategy in the chroot jail exactly as Martin suggested, but this is for the future, due to lack of time. William --~--~---------~--~----~------------~-------~--~----~ To post to this group, send email to sage-devel@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/sage-devel URLs: http://sage.scipy.org/sage/ and http://modular.math.washington.edu/sage/ -~----------~----~----~----~------~----~------~--~---
