CODEWITHSUNDEEP
pythonunixsandbox
noio
noio

Reputation: 5812

Run python script with reduced permissions

I have to run some student-made code that they made as homework, I'm running this on my own computer (Mac OS), and I'm not entirely certain they won't accidentally "rm -rf /" my machine. Is there an easy way to run their python scripts with reduced permissions, so that e.g. they can access only a certain directory? Is PyPy the way to go?

Upvotes: 1

Views: 528

Answers (3)

mjgalindo
mjgalindo

Reputation: 876

Nowadays, a simple way would be to run student code inside a docker container. You just mount the volume with the code and use an image with python.

e.g. assuming /tmp/student_code contains student submissions:

docker run -it --mount type=bind,source=/tmp/student_code,target=/student_code python /bin/bash

you are dropped into a new bash session and can run python /student_code/script1.py

Upvotes: 0

Jan
Jan

Reputation: 735

Create a new user account "student". Run your students' scripts as "student". Worst case, the script will destroy this special user account. If this happens, just delete user "student" and start over.

Upvotes: 0

Gareth Latty
Gareth Latty

Reputation: 89017

You could use a chroot environment. In this setup, the script can't access any files outside the chroot jail.

Upvotes: 2

Related Questions