Optionally start the kernel with a trusted sandbox

rmculpepper / iracket

Jupyter kernel for Racket

BSD 3-Clause "New" or "Revised" License

95 stars 14 forks source link

Optionally start the kernel with a trusted sandbox #13

Closed mpcjanssen closed 3 years ago

mpcjanssen commented 3 years ago

I use Jupyter as my REPL of choice running om my local machine. In this case the current sandbox configuration (especially sandbox-security-guard) is too limited. For example, network requests are not allowed. Would it be possible to add an argument while starting the kernel to start a trusted sandbox instead?

gussmith23 commented 3 years ago

I see that this was closed, but how do I actually use the new flag? Sorry, completely new to Racket and Jupyter Notebook!

mpcjanssen commented 3 years ago

@gussmith23 you pass the -t parameter from kernel.json. What I do is

Install IRacket
Make a copy of the IRacket kernel folder
Add the -t parameter to kernel.json

My kernel.json is:

{"argv":["racket","-l","iracket/iracket","--","-t","{connection_file}"],"display_name":"Racket (trusted)","language":"racket"}

gussmith23 commented 3 years ago

Ah, thanks. I had done the same thing, but assumed there was a smoother way to do this! Thanks for the info.

gussmith23 commented 3 years ago

I guess were I (or someone else) motivated, this could probably be implemented as a flag on the installation script...?