On 3/2/12 11:31 AM, Jan Groenewald wrote:
Hi

On 2 March 2012 09:03, Robert Bradshaw <rober...@math.washington.edu
<mailto:rober...@math.washington.edu>> wrote:

    Sage is as secure as bash (+ compilers). If you want to run arbitrary
    bash scripts, let other people run their bash scripts, or set up a web
    interface for others to running bash scripts, then you should get your
    security from another level (limited accounts, jails, virtual
    machines, etc.)

    One can talk a bit about the security of the notebook itself, which
    has been done, but it doesn't really make sense to talk about "sage
    security" as it's a (huge) superset of a shell prompt.

Are all notebook users running as the same sage user?

Not when following my SageServer instructions [1]. I create 10 user accounts to evaluate worksheets. However, you could easily scale the number to 100 or however many simultaneous worksheets you thought you needed. William suggested incorporating into the notebook a feature to limit the number of simultaneous worksheets and forcing each worksheet to evaluate as a separate ssh login from the precreated 100 (or whatever) user accounts.

Thanks,

Jason

[1] http://wiki.sagemath.org/SageServer

--
To post to this group, send an email to sage-devel@googlegroups.com
To unsubscribe from this group, send an email to 
sage-devel+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/sage-devel
URL: http://www.sagemath.org

Reply via email to