{ "info": { "author": "Pardus Linux", "author_email": "UNKNOWN", "bugtrack_url": null, "classifiers": [], "description": "\nSandbox is a mechanism which provides a tighly-controlled set of resources\nfor guest programs to run in. They are used for security and testing purposes.\n\nThere are many uses for a sandbox in package management:\n\n1. In the build process, we dont want packages to modify host operating\nsystem while they are configuring or compiling. We want them to be\nconstrained in their temporary build directory. Denying the write\noperations outside of this directory is most basic application of\na sandbox here.\n\n2. Instead of actually doing some operations like changing permission or\nownership of files, we can just log them, and mark in the generated package.\nThat way we dont need to be a root user in order to build a package with\nsuch properties.\n\n3. We can log many build operations, and analyze them to see actual\nbuild dependencies of the package for example.\n\n4. We can build package in a temporary directory, but let it think that\nin runs in root directory with everything out there is read only mapped\ninside. That can greatly simplify build scripts.\n\nThere are two ways to sandbox a build script within user context without\nresorting to special kernel modules:\n\n1. We can override functions of glibc with LD_PRELOAD. Since this requires\nexecuting the script inside a new shell, passing Python variables between\nbuilder and scripts is hacky and cumbersome.\n\n2. We can intercept system calls with kernel ptrace interface.\n\nWe decided to go with the latter way. There is already a good ptrace\nsandbox framework for Python, called Subterfugue. Apart from a small\nC binding for ptrace call, it is completely written in Python.\nUnfortunately dealing with each system call with Python is quite\nslow for a build farm. There are over a thousand packages, and\nsome of them like OpenOffice.org or kdebase takes a huge time to\ncompile even on high end computers.\n\nThus we wrote catbox, a small sandboxing module for PiSi (the package\nmanager for Pardus Linux). It is completely written in C, and it wont\nprovide custom system call hooks or advanced modifications to the\nguest environment like Subterfugue.\n\nAlthough, catbox started as a sandboxing module for PiSi, it is now a\nmore generic sandbox module that can be used generically.\n\nEvent Hooks:\n\n* child_initialized(pid): Event hook is called on parent process but\n after child is initialized to be traced and before parent notifies\n child to continue. Pid of the child process is given as the only\n argument. (available in version 1.4+)\n\n* child_died_unexpectedly(pid): Event hook is called when we got a\n signal/event from a child but the child was already dead. Pid of the\n child process is given as the only argument. (available in version\n 1.4+)\n\n\nDependencies:\n\n* pcre (OPTIONAL): If enabled path can be defined with regular\n expressions. Just append --enable-pcre to the setup.py command.\n\n* Testify: (https://github.com/Yelp/Testify) Testify is used for\n unittests only.\n", "description_content_type": null, "docs_url": null, "download_url": "UNKNOWN", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/Pardus-Linux/catbox", "keywords": null, "license": "UNKNOWN", "maintainer": null, "maintainer_email": null, "name": "catbox", "package_url": "https://pypi.org/project/catbox/", "platform": "UNKNOWN", "project_url": "https://pypi.org/project/catbox/", "project_urls": { "Download": "UNKNOWN", "Homepage": "https://github.com/Pardus-Linux/catbox" }, "release_url": "https://pypi.org/project/catbox/1.7.0/", "requires_dist": null, "requires_python": null, "summary": "Fast sandbox implementation for Python", "version": "1.7.0" }, "last_serial": 1205674, "releases": { "1.3": [ { "comment_text": "", "digests": { "md5": "b9ce39691187af8f797cc3ca854d1e12", "sha256": "6e349df5361371508e4b27c8355e17e2e3a8f58183adf7eb3b2693becb33e310" }, "downloads": -1, "filename": "catbox-1.3.tar.gz", "has_sig": false, "md5_digest": "b9ce39691187af8f797cc3ca854d1e12", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 16238, "upload_time": "2012-11-08T23:27:48", "url": "https://files.pythonhosted.org/packages/b9/80/2b3716983a2776f58f2f887b603373410a0e1d6cc0fb83d8abd8c6e860a9/catbox-1.3.tar.gz" } ], "1.4": [], "1.5": [], "1.6": [ { "comment_text": "", "digests": { "md5": "ec3b8e485799cdada0fc590b6482f0cf", "sha256": "2a2d23b0ec3880a920306c8bbbf78acd9cbc59c6b64039c8fdfc722506a601df" }, "downloads": -1, "filename": "catbox-1.6.tar.gz", "has_sig": false, "md5_digest": "ec3b8e485799cdada0fc590b6482f0cf", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19763, "upload_time": "2013-02-21T01:05:23", "url": "https://files.pythonhosted.org/packages/be/12/a3e861a789698dd37183db01efaa0df9138aacfeaac3bd7c91a1866a36b4/catbox-1.6.tar.gz" } ], "1.6.1": [ { "comment_text": "", "digests": { "md5": "a280d6cfff949d451d9dfd82ca7577c1", "sha256": "d7f59f0c7e691185adef38448eb321160e59631b5969e404056984c26aae7989" }, "downloads": -1, "filename": "catbox-1.6.1.tar.gz", "has_sig": false, "md5_digest": "a280d6cfff949d451d9dfd82ca7577c1", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 24593, "upload_time": "2014-01-29T21:33:49", "url": "https://files.pythonhosted.org/packages/08/98/b1782ae4afd1de1e09cd69c2072e68a07cc69f40c983c24743ad3de21c10/catbox-1.6.1.tar.gz" } ], "1.6.2": [ { "comment_text": "", "digests": { "md5": "4b65ef054ba1197a1ca74a846fb4230e", "sha256": "fe56def25af3c583a96986b47c396d91f46953425a942174fa6d77e3dcb97ca8" }, "downloads": -1, "filename": "catbox-1.6.2.tar.gz", "has_sig": false, "md5_digest": "4b65ef054ba1197a1ca74a846fb4230e", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 16711, "upload_time": "2014-04-30T20:43:07", "url": "https://files.pythonhosted.org/packages/89/ac/bfa36fe70f1bc0fb65b56442d47ba0bf8730722803eaf9e5eac789339879/catbox-1.6.2.tar.gz" } ], "1.7.0": [ { "comment_text": "", "digests": { "md5": "74b51deec19592ee5856dd04c8254da2", "sha256": "f0f066048679a9f5a00b9ccd83c06fb0b98d5d5f27dab1ba0c6ef325e71db109" }, "downloads": -1, "filename": "catbox-1.7.0.tar.gz", "has_sig": false, "md5_digest": "74b51deec19592ee5856dd04c8254da2", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 22837, "upload_time": "2014-08-28T20:36:54", "url": "https://files.pythonhosted.org/packages/73/36/9de2e95b97e50f6cbde0450f1a84f5329fb6f38e066c9642e92f6e9ec0e5/catbox-1.7.0.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "74b51deec19592ee5856dd04c8254da2", "sha256": "f0f066048679a9f5a00b9ccd83c06fb0b98d5d5f27dab1ba0c6ef325e71db109" }, "downloads": -1, "filename": "catbox-1.7.0.tar.gz", "has_sig": false, "md5_digest": "74b51deec19592ee5856dd04c8254da2", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 22837, "upload_time": "2014-08-28T20:36:54", "url": "https://files.pythonhosted.org/packages/73/36/9de2e95b97e50f6cbde0450f1a84f5329fb6f38e066c9642e92f6e9ec0e5/catbox-1.7.0.tar.gz" } ] }