Disable the command system




On Thu, 10 Mar 2011, Dr. David Kirkby wrote:

< On 03/10/11 09:38 AM, Leo Butler wrote:
< >   -allow full access to a Maxima shell but run
< >   the shell under very restrictive conditions.
< >   For example, you could run your webserver and
< >   Maxima inside a virtual machine.
< >   -use the Sage web interface, which gives you
< >   access to Maxima.
< 
< Using Sage would not solve the problem - that too has the ability to escape to
< the python shell.
< 
< For the web interface to Sage at
< 
< http://t2nb.math.washington.edu:8080/

I wasn't clear enough: let the students use Sage project's web interface above.
If one of them hacks it, then that is a security lesson for the Sage
folks.

Leo

-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.