Inquiry / Request for feedback [Service: a sandboxed JVM on a public server]

[Riven]

I have found a way to determine heap-usage *per sandbox* in the JVM (heapdump analysis), so I can now let a lot of users share the same JVM to significantly reduce the overhead - while still ensuring everybody gets their own guaranteed heapspace. So now a 64MB share will really be 64MB, without a ~8MB of JVM footprint.


Further, I think I won't have a nice desktop-app to connect to the sandbox - people just have to connect to some port on the server (with a user/pass) and fetch the stdout/stderr/stdin streams from there. FTP will be used for transfering files. For people doing networked games a GUI will probably just get in the way...


I'm extremely busy, and today was the first time I worked on this service, since my latest post in this thread...

[CommanderKeith]

That's fantastic. If you make a simple server demo that runs a jar and gets the std out/in then people should find it pretty easy to use the service.

If you can easily relax the no-reflection security aspect then I'd like to use this with my app. 

What are you busy with these days anyway? I assume it's work, are you doing Swing, NIO, or what?!

Keith

[Riven]

That's fantastic. If you make a simple server demo that runs a jar and gets the std out/in then people should find it pretty easy to use the service.

If you can easily relax the no-reflection security aspect then I'd like to use this with my app. 

What are you busy with these days anyway? I assume it's work, are you doing Swing, NIO, or what?!

Keith

Quite a few posts earlier, I posted that Reflection was supported, at long as you do not use {field|method}.setAccessible(true). I assume that is enough... right? I can't even block 'safe' use of Reflection, even if I'd want to 



<sub>I'm busy with building a large website, with an Applet to build/modify closets in detail, with my own isometric software renderer - it's a webshop in Spain (and I don't speak a word Spanish), and it's about to launch April 4th. *shiver*. The design, development (tens of thousands lines of Javascript - not to mention PHP - aaaaah!!), content management system, ordering stuff, ecommerce-handling is all done by me, and there is a lot at stake - so I'm pretty much working all day on it - that includes nights!

And after April 4th it will be maintainance and support and whatnot - but fortunately no strict deadlines.</sub>




Anyway, I bet I can get a demo server up and running in a few hours. Maybe tomorrow

Games published by our own members! Check 'em out!

[CommanderKeith]

Quite a few posts earlier, I posted that Reflection was supported, at long as you do not use {field|method}.setAccessible(true). I assume that is enough... right? I can't even block 'safe' use of Reflection, even if I'd want to 

Yes, I remember, I should have said that I needed {field|method}.setAccessible(true) to be allowed. 

Sounds like a cool project. Even though it's big, at least you've got control over the whole thing from start to finish.

[Riven]

By allowing all reflection, the isolation/sandbox securitymanager can just as well be not there at all.


Just a tiny example:

1   2   3

Field field = System.class.getDeclaredField("security"); field.setAccessible(true); field.set(null);

Tadaaaa, the SecurityManager is uninstalled.



The ReflectPermission does not give any info about what field/method is accessed
It's like that NetPermission that doesn't tell me the host the ServerSocket wants to bind to... it's always "localhost", bleh

[blahblahblahh]

Yes, I remember, I should have said that I needed {field|method}.setAccessible(true) to be allowed. 

Why? (out of interest)