Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of bchesneau@gmail.com
 designates 209.85.210.182 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <1359975556.10244.13.camel@devil>
References: 
 <CAN-3CBK3Pq3=kTy82T4LR3Fr27k_u-=QFSo2VRwKHnw4fC-eTg@mail.gmail.com>
	<CAKmKYaCUgd+oxyjP4BcOXz94_2OJOB6du_1hF-nS30EtMGaY0A@mail.gmail.com>
	<CAN-3CBLtSwGSQ8JxMGjFSfAtGOWtr1gjJdvdVRYcsDg3a2-ogw@mail.gmail.com>
	<5102B439.10500@lymegreen.co.uk>
	<CAN-3CBK+yWV0oQX7f1Hsj0XpORvrjpJ7dmEhn4bpHLryKDVmAw@mail.gmail.com>
	<CAFUSCh_knsU-yg-bBu0v8Labq11tYJfcTB1VLrGvFNJkE4YpLQ@mail.gmail.com>
	<CAN-3CBLS_iQJB=n7VVHJ288OOu+5JO-6oJwR=760KmwKE9huQQ@mail.gmail.com>
	<CAFUSCh9zoCvJU638s7n72+oAmJMSzmM9+oett-=Hiccx-hwjhw@mail.gmail.com>
	<CAN-3CBKMdDK7uv4-pKJn5ziPU=my23jXA6S0SQNAP+Jw2bHsow@mail.gmail.com>
	<CAJNb-9oVW9AfngCmd7bJjU34pqsouxYtScAhqCB5p0zUXh6obw@mail.gmail.com>
	<CAJ_m3YCDEtQ8HKSZ8q1uCBaP5Gg08pUxv+4-kX_+xQfjPgt3Hw@mail.gmail.com>
	<CAL+Y1nsoN-voZBexDVO3_xNAdy318uyazXsLyezB2U9vbvv-fQ@mail.gmail.com>
	<CAN-3CBLhsi2hG1XXOFgZNXYq+1Nm8Rb7Gsvq=tmTPaLYO_2r4g@mail.gmail.com>
	<CAAL6JQjUY9C9K7RfjVYJm-kGwNXq4vWEPJti2_bho_FPA9ukTg@mail.gmail.com>
	<CAJ_m3YBaM7wCG=EOcZDk7Mx2gw0dhNdsOoM0oCnKf2Tf_czjrw@mail.gmail.com>
	<CAN-3CBJgfE1CF4sK_dQWS1sQQNiKyecgSpwViOQZfHSvdOcczw@mail.gmail.com>
	<CAAL6JQizwBioFWo6hfyVdFrBwr5vdGuHjNToHSdCFvb9Sq05iw@mail.gmail.com>
	<CAN-3CB+8nZUNaLYi06d4-O0A4AzdYZAnaF_g5g2KXsDX-yNcAw@mail.gmail.com>
	<1359906287.12133.41.camel@devil>
	<CAJNb-9pgUtTj080iTmY7F1mrsHKEP+u52McOKDvuQ0Jfvrojjw@mail.gmail.com>
	<1359975556.10244.13.camel@devil>
Date: Mon, 4 Feb 2013 12:18:54 +0100
Message-ID: 
 <CAJNb-9qTWRCH01HhFxotr+eECtChO29a4A2XNMv-+cRQ2LtOuA@mail.gmail.com>
Subject: Re: Branch to switch from SpiderMonkey to Node.js
From: Benoit Chesneau <bchesneau@gmail.com>
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

On Mon, Feb 4, 2013 at 11:59 AM, Klaus Trainer <klaus_trainer@posteo.de> wrote:
> On Mon, 2013-02-04 at 11:18 +0100, Benoit Chesneau wrote:
>>
>> DOS has nothing with sandboxing or maybe in a large extent here. Sandboxing
>> in couchjs is about:
>>
>> 1. restrict I/O : no disk or net access from a view
>> 2. make sure that a view function won't leek to another
>
> One attempt to protect against DOS would be to spawn (sandboxed) worker
> processes, monitor them, and kill them if they misbehave (e.g. time them
> out if they take too much time to process a document). In fact, the
> sandbox npm module (https://github.com/gf3/sandbox) does something like
> that.
>
> But you're right. I agree with you that this should be out of scope for
> now, especially in this discussion here.
>

I think we already prevent such DOS imo with the process execution
timeout. Maybe that need to be improved but this can also be done
here.

- benoit