Re: [Xen-users] Using Xen as a jail for malicious code

> I am beginning to write some open source programming contest software
> (http://threec.berlios.de).  I am wondering if Xen would be a suitable
> jail for arbitrary and anonymous code submitted for the judging
> software.

That's what it was originally created for: containment of arbitrary untrusted 
code submitted to a Xenoserver (Xenoservers project described: 
http://www.cl.cam.ac.uk/Research/SRG/netos/xeno/).

> I'd like to ensure that code can run for only a limited 
> time, use a limited amount of memory, and not have access to resources
> including the network and most of the judger's filesystem.

Yep, that's all doable.  You should obviously take precautions just in case 
somebody's code actively attempts to "break out" of it's domain but even that 
*shouldn't* be possible (we don't know of any way to do this, so if it was 
possible it'd be a high-priority bugfix...).

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread]

Current Thread

[Next in Thread>

Previous by Date:

[Xen-users] xensv web page displaying what it should, Jim Houchin

Next by Date:

[Xen-users] xen box borked?, mark foster

Previous by Thread:

[Xen-users] Using Xen as a jail for malicious code, Rob Renaud

Next by Thread:

Re: [Xen-users] Using Xen as a jail for malicious code, Florian Weimer

Indexes:

[Date] [Thread] [Top] [All Lists]