[DISCUSS] Shell interpreter

2024-04-11 Thread Jongyoul Lee
Hello, I want to discuss Shell interpreter issue with you. For your information, we had a security report using Shell interpreter to execute malicious code with a system account. As you know, it's a kind of characteristic of Apache Zeppelin but some contributors including me thought it was too ri

Re: [External] : [DISCUSS] Shell interpreter

2024-04-11 Thread Michiel Haisma
Hello Everyone, As we all know, Apache Zeppelin is, by design, a remote code execution platform. There are some cases where this does not apply, but for a lot of script-style interpreters, the whole point is for the user to run code on the server. If there is a problem with the shell interprete