Repository navigation
Is it possible to lock the repy application files to prevent modification? #71
Description
It's come to my attention that the RePy application files are mutable due to a student injecting stuff into the repy.py file as one of their attack cases.
While that is a good attack, I do think it might be good to have a method of preventing that as depending on how it was done it could corrupt the build. While this student cleaned up after themselves and provided a script to sanitize the repy.py file others might not have the foresight and it might create problems.
Activity
JustinCappos commentedon Nov 18, 2020
This is a good observation. Usually one does not place the user directory / user code in the same directory as the repy source code. I'd recommend we make the instructions for running repy clearer so that that sort of use case is not common for students using the framework.
SemicolonExpected commentedon Nov 19, 2020
I think the
repy.pyfile itself has to be in the directory at least due to the fact that the command we run isrepy.py restrictions.default encasementlib.r2py <referencemonitor> <attack>JustinCappos commentedon Nov 19, 2020