Re: octave on server

[Tom Weichmann]

This has already been done in both CGI PERL as well as PHP.

Check the Octave Archives in the summer of 2000 (I do not remember exactly 
when I did this) for some ideas of what has already been done.  

Basically, I created a chroot environment and build a completely separate 
version of octave (and everything it needs) inside of it.  I used a program 
called sbox to make the cgi run inside of this chroot env.  I also filtered 
commands like system(), but what you will find is that there will always be 
someone who can figure out or come up with some way to execute something.  
This is why you HAVE to use a chroot env.  This way even if someone can trash 
your install of octave, your server is not damaged.

I will try to find the code that I wrote.  I did this as part of a research 
grant for the SUNY College at Buffalo Research Foundation 3 years, 2 
computers and several Linux Installs ago.

Feel free to ask if you have any questions.  It has been quite some time 
though.

Good Luck,

Tom Weichmann


On Thursday 02 October 2003 07:23 am, address@hidden wrote:
> >Are you allowed to use some sort of wrapper (suexec, cgiwrap) to
> >restrict the execution to some non-privileged user?
> >There is a web interface to the R statistics package available at
> >http://www.math.montana.edu/Rweb/; but I think it runs with a uid same
> >as the web server.
> >
> >
> >Regards,
> >ST
>
> Thanks you for your help, I've just received permissions to execute perl
> scripts on the server (after a rigorous check of all the scripts). I think
> this will solve my problem, so thank you for you help, it has been really
> useful. Paolo
>
>
>
>
> -------------------------------------------------------------
> Octave is freely available under the terms of the GNU GPL.
>
> Octave's home on the web:  http://www.octave.org
> How to fund new projects:  http://www.octave.org/funding.html
> Subscription information:  http://www.octave.org/archive.html
> -------------------------------------------------------------



-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.

Octave's home on the web:  http://www.octave.org
How to fund new projects:  http://www.octave.org/funding.html
Subscription information:  http://www.octave.org/archive.html
-------------------------------------------------------------