Maniphest T179021

Investigate using firejail to replace limits.sh if it's installed
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Legoktm
	Oct 25 2017, 5:35 PM

Tags

Referenced Files

None

Subscribers

MoritzMuehlenhoff

Description

Related to T173370: Support restricted execution of external commands (via firejail).

I believe all of the limit.sh features are implemented in firejail now (the maintainer just implemented time limits), and I think it would provide a cleaner interface instead of relying upon limits.sh.

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		None	T179021 Investigate using firejail to replace limits.sh if it's installed
		Invalid		None	T179022 Backport firejail 0.9.52 for use on Wikimedia appservers

Event Timeline

Legoktm created this task.Oct 25 2017, 5:35 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 25 2017, 5:35 PM

Legoktm created subtask T179022: Backport firejail 0.9.52 for use on Wikimedia appservers.Oct 25 2017, 5:37 PM

Legoktm changed the status of subtask T179022: Backport firejail 0.9.52 for use on Wikimedia appservers from Open to Stalled.

Legoktm edited projects, added MediaWiki-Shell; removed MediaWiki-General.Dec 9 2017, 3:18 AM

Legoktm mentioned this in T182489: The NO_EXECVE shell restriction doesn't work with firejail because of limit.sh.Dec 9 2017, 9:32 AM

Legoktm changed the status of subtask T179022: Backport firejail 0.9.52 for use on Wikimedia appservers from Stalled to Open.Feb 4 2018, 6:09 PM

Legoktm closed subtask T179022: Backport firejail 0.9.52 for use on Wikimedia appservers as Invalid.Sep 16 2021, 10:42 PM