On 3/2/12 11:31 AM, Jan Groenewald wrote:
Hi
On 2 March 2012 09:03, Robert Bradshaw <rober...@math.washington.edu
<mailto:rober...@math.washington.edu>> wrote:
Sage is as secure as bash (+ compilers). If you want to run arbitrary
bash scripts, let other people run their bash scripts, or set up a web
interface for others to running bash scripts, then you should get your
security from another level (limited accounts, jails, virtual
machines, etc.)
One can talk a bit about the security of the notebook itself, which
has been done, but it doesn't really make sense to talk about "sage
security" as it's a (huge) superset of a shell prompt.
Are all notebook users running as the same sage user?
Not when following my SageServer instructions [1]. I create 10 user
accounts to evaluate worksheets. However, you could easily scale the
number to 100 or however many simultaneous worksheets you thought you
needed. William suggested incorporating into the notebook a feature to
limit the number of simultaneous worksheets and forcing each worksheet
to evaluate as a separate ssh login from the precreated 100 (or
whatever) user accounts.
Thanks,
Jason
[1] http://wiki.sagemath.org/SageServer
--
To post to this group, send an email to sage-devel@googlegroups.com
To unsubscribe from this group, send an email to
sage-devel+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/sage-devel
URL: http://www.sagemath.org