[Jailkit-users] Jailing a web server app?

[Rich Morin]

I'm building a wiki that will allow users to put executable code
into their pages.  This could be very handy, but it obviously is
also a security challenge.  For information on the overall goals
and design of the wiki, see:

  http://cfcl.com/twiki/bin/view/MBW/Mobi

My current plan is to send the text of the pages to a jailed
instance of a Ruby-based web server (eg, Sinatra, Merb) or
PHP.  After the embedded code has been run, the results would
be returned to the main wiki server for further processing.

I'd be happy to hear any comments or suggestions about how to
do this, what NOT to do, etc.  I'm pretty experienced in Unix,
but brand new to Jailkit, if that helps.

-r
-- 
http://www.cfcl.com/rdm            Rich Morin
http://www.cfcl.com/rdm/resume     address@hidden
http://www.cfcl.com/rdm/weblog     +1 650-873-7841

Technical editing and writing, programming, and web development