What is the best way to execute sandboxed Java code?

Question

I am trying to reproduce an API for executing Java (like ideone.com has), but so far I'm having a lot of difficulties running Java sandboxed (SELinux sandbox doesn't work).

I've heard about the SecurityManager, but I'm trying to figure out what's the easiest way to run Java code in a sandbox (kind of like a Java applet running in the browser), instead of writing my own jail server using the SecurityManager.

what about this answer, seems like that's you need?: http://stackoverflow.com/questions/9192493/how-to-run-java-code-in-a-restricted-sandbox-without-network-filesystem-access — Stas, May 30 '13 at 16:07

score 1 · Answer 1 · answered May 30 '13 at 17:12

1

The SecurityManager is designed for this purpose. You'll need to create a policy file to restrict access, as described here: Policy Files, then enable it at runtime for just the code you're trying to sandbox.

answered May 30 '13 at 17:12

Richard Wilkes

309
2
10

score 1 · Accepted Answer · answered May 31 '13 at 21:37

1

You might want to take a look at the java-sandbox project [1] which aims at providing a simple interface to execute untrusted code.

[1] http://blog.datenwerke.net/p/the-java-sandbox.html

answered May 31 '13 at 21:37

Arno Mittelbach

952
5
12

What is the best way to execute sandboxed Java code?

2 Answers2