From help-octave-request at bevo dot che dot wisc dot edu Thu Oct 2 12:42:31 2003 Subject: Re: octave on server From: Tom Weichmann To: "paolo\ dot libardi\ at libero\ dot it" , "help-octave" Date: Thu, 2 Oct 2003 13:41:53 -0700 This has already been done in both CGI PERL as well as PHP. Check the Octave Archives in the summer of 2000 (I do not remember exactly when I did this) for some ideas of what has already been done. Basically, I created a chroot environment and build a completely separate version of octave (and everything it needs) inside of it. I used a program called sbox to make the cgi run inside of this chroot env. I also filtered commands like system(), but what you will find is that there will always be someone who can figure out or come up with some way to execute something. This is why you HAVE to use a chroot env. This way even if someone can trash your install of octave, your server is not damaged. I will try to find the code that I wrote. I did this as part of a research grant for the SUNY College at Buffalo Research Foundation 3 years, 2 computers and several Linux Installs ago. Feel free to ask if you have any questions. It has been quite some time though. Good Luck, Tom Weichmann On Thursday 02 October 2003 07:23 am, paolo\ dot libardi\ at libero\ dot it wrote: > >Are you allowed to use some sort of wrapper (suexec, cgiwrap) to > >restrict the execution to some non-privileged user? > >There is a web interface to the R statistics package available at > >http://www.math.montana.edu/Rweb/; but I think it runs with a uid same > >as the web server. > > > > > >Regards, > >ST > > Thanks you for your help, I've just received permissions to execute perl > scripts on the server (after a rigorous check of all the scripts). I think > this will solve my problem, so thank you for you help, it has been really > useful. Paolo > > > > > ------------------------------------------------------------- > Octave is freely available under the terms of the GNU GPL. > > Octave's home on the web: http://www.octave.org > How to fund new projects: http://www.octave.org/funding.html > Subscription information: http://www.octave.org/archive.html > ------------------------------------------------------------- ------------------------------------------------------------- Octave is freely available under the terms of the GNU GPL. Octave's home on the web: http://www.octave.org How to fund new projects: http://www.octave.org/funding.html Subscription information: http://www.octave.org/archive.html -------------------------------------------------------------