cms-dev / cms-dev/cms

Create a plugin interface for sandboxes?

Open
#122 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

sandbox
Dominant language
Python
Stars
1k
Forks
412
Avg merge
6d 10h
Merged PRs (30d)
3

Description

Issue spawned off from #39 :

Stefano said:

Sadly it seems that using isolate is a bit cumbersome, especially due to system behaving not as expected or having different configurations. I am confident that most of these problems will be solved by time as Linux 3.8 will gain more market share, but nonetheless it seems that isolate is more dependent on the distro.

What I am worried about is that, especially in this transition time, some users will try CMS and fails because of problems connected to run isolate. On the other hand, to try CMS out, or to organizing contests whose contestants are trusted, they might even avoid the use of a sandbox at all.

The proposal is to consider writing a standard interface for sandboxes, in such a way that people not currently interested in having a strong security can use a the "void" sandbox, and possibly (if it does not involve a lot of work) we could keep mo-box as a backup.

I think this would be useful, but not as useful as having isolate work better, so I don't want to lose resource on the latter to improve the former. Maybe I'd just ask you to keep in mind the possibility of having a modular sandbox system while you are working on improving isolate.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading issue #39 and tracing how the current isolate sandbox is integrated. Review the existing isolate and mo-box usage, then establish the scope and acceptance criteria for a modular sandbox interface, including whether a void sandbox is supported.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux
Domain
operating-systems, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.