PremierLangage / premierlangage

Server for auto-evaluating exercices
Other
18 stars 9 forks source link

network breakout #188

Closed igel-kun closed 5 years ago

igel-kun commented 5 years ago

using the exercise editor, it seems possible to connect to the internet (also, the user running the exercises seems to be root) shot-2019-02-07_16-27-40

qcoumes commented 5 years ago

This is intended, exercises are run inside a Docker container as root, these container do have internet access as it allow more kind of exercises (using online ressouces, webcrawling...) and as far as we know, it does not cause any security issue.

nimdanor commented 5 years ago

that's arguable. The "right" way is to set a proxy in the server for the sandbox in the case we want to let the students access the net.

Net access should be closed in next revision, and let's wait for the need to arise to implement a proxy.

nimdanor commented 5 years ago

This issue is now transfered to Network exercices on the sandbox https://github.com/plgitlogin/sandbox/issues/28