[sage-devel] Re: Secure Notebook Deployment

2007-10-17 Thread William Stein
On 10/16/07, TrixB4Kidz <[EMAIL PROTECTED]> wrote: > > I would suggest not to actually use unixy infrastructure to create the > > users. But that certainly involves a decent amount of coding to do > > your own user creation/permission management and so on. Trying to > > secure unix user accounts s

[sage-devel] Re: Secure Notebook Deployment

2007-10-17 Thread William Stein
On 10/16/07, mabshoff <[EMAIL PROTECTED]> wrote: > On Oct 17, 1:09 am, "William Stein" <[EMAIL PROTECTED]> wrote: > > On 10/16/07, Timothy Clemans <[EMAIL PROTECTED]> wrote: > > You're right; that's exactly what I want to do. I want to make it so the > > working pool sage* users can't use the net

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread Alfredo Portes
> > And yes, I know, if only I would release a "SageLite" that was the sage > > notebook without the hard-to-build Sage math library, then all kinds > > of unix gurus would just solve all these problems for me (since then the > > notebook would be popular and independently interesting beyond Sage)

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread TrixB4Kidz
> I would suggest not to actually use unixy infrastructure to create the > users. But that certainly involves a decent amount of coding to do > your own user creation/permission management and so on. Trying to > secure unix user accounts seems doomed in my opinion. I agree to some extent. Howeve

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread mabshoff
On Oct 17, 1:09 am, "William Stein" <[EMAIL PROTECTED]> wrote: > On 10/16/07, Timothy Clemans <[EMAIL PROTECTED]> wrote: > > > > > I don't think it is the main jails you would block since they have to > > receive and send data in order for the public to access them. Maybe > > you would block the

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread William Stein
On 10/16/07, Timothy Clemans <[EMAIL PROTECTED]> wrote: > > I don't think it is the main jails you would block since they have to > receive and send data in order for the public to access them. Maybe > you would block the pool of sage__ users from accessing the net using > Iptables. (this might be

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread Timothy Clemans
I don't think it is the main jails you would block since they have to receive and send data in order for the public to access them. Maybe you would block the pool of sage__ users from accessing the net using Iptables. (this might be helpful --> http://www.thescripts.com/forum/thread705507.html) Al

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread William Stein
On 10/16/07, TrixB4Kidz <[EMAIL PROTECTED]> wrote: > Hey again. I actually got a similar reply from William earlier today > that I was going to append to this message (this post took quite some > time to appear on google groups for whatever reason). The particular > attack that I described is pr

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread William Stein
On 10/16/07, Timothy Clemans <[EMAIL PROTECTED]> wrote: > William do you really think the notebooks can be vandalized? Yes. The only secure computer is one that is not connected to the internet and is behind a secure wall with armed guards, etc. It helps if the computer is broken too. Security

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread TrixB4Kidz
Hey again. I actually got a similar reply from William earlier today that I was going to append to this message (this post took quite some time to appear on google groups for whatever reason). The particular attack that I described is preventable, but the fact that the users have full access to

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread Timothy Clemans
William do you really think the notebooks can be vandalized? > > > If I remember right William welcomes people to try to vandalize the > > > notebook server at https://sage.math.washington.edu:8102 > > No I don't! The e-mail below is what I thinking of. -- Forwarded message -- F

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread William Stein
On 10/16/07, Robert Bradshaw <[EMAIL PROTECTED]> wrote: > > The public notebook servers on sage.math.washington.edu are jailed > > (http://sagemath.org/doc/html/inst/node10.html). Also there is a pool > > of 30 unix users that are used to evaluate worksheet code. That > > protects the main noteboo

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread Robert Bradshaw
On Oct 16, 2007, at 3:02 PM, Timothy Clemans wrote: > Hi, > > The public notebook servers on sage.math.washington.edu are jailed > (http://sagemath.org/doc/html/inst/node10.html). Also there is a pool > of 30 unix users that are used to evaluate worksheet code. That > protects the main notebook s

[sage-devel] Re: Secure Notebook Deployment

2007-10-16 Thread Timothy Clemans
Hi, The public notebook servers on sage.math.washington.edu are jailed (http://sagemath.org/doc/html/inst/node10.html). Also there is a pool of 30 unix users that are used to evaluate worksheet code. That protects the main notebook system from a random user. Ulimit is also used. If I remember ri