Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use unix domain socket if available #417

Closed
homberghp opened this issue May 23, 2021 · 3 comments
Closed

use unix domain socket if available #417

homberghp opened this issue May 23, 2021 · 3 comments
Assignees
Milestone

Comments

@homberghp
Copy link

I would like to run maven builds with a user who has no network access.

  • Access is disabled with iptables suppressing all network access with iptables -A OUTPUT -p all -m owner --uid-owner 1002 -J DROP.
  • Purpose is to build untrusted code (actually student code, but we want to make any fraud as difficult as possible, so disable network during build to disable access to trojans and such)
    Maybe open just the mvnd ports will do.
@gnodet
Copy link
Contributor

gnodet commented Jun 2, 2021

It should be possible to compile the client code using GraalVM on JDK 16 and defaulting to using unix sockets when building on JDK 16.

@gnodet
Copy link
Contributor

gnodet commented Jun 18, 2021

The ipc sync server should also be enhanced to use unix domain socket.

@electrum
Copy link

electrum commented Jul 6, 2021

@gnodet gnodet added this to the 0.6.0 milestone Aug 31, 2021
@gnodet gnodet self-assigned this Aug 31, 2021
@gnodet gnodet closed this as completed Aug 31, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants