Hi Ned,
I am not trying to integrate Codejail with Open edX at this point -- but it is on the cards. I have been following the documentation for the project and see if I am able to set it up correctly as a *stand-alone* system.
Here is the setup I got:
(myproj)rhlpyd@nyc:~$ which python
/home/rhlpyd/aop-projects/codejail-test/myproj/bin/python
(myproj)rhlpyd@nyc:~$ ls -l aop-projects/codejail-test/
total 12
drwxrwxr-x 4 rhlpyd rhlpyd 4096 Aug 14 13:02 codejail
drwxrwxr-x 7 rhlpyd rhlpyd 4096 Aug 14 22:01 myproj
drwxrwxr-x 6 sandbox sandbox 4096 Aug 17 12:13 myproj-sandbox
rhlpyd@nyc:~$ sudo less /etc/sudoers.d/01-sandbox
rhlpyd ALL=(sandbox) SETENV:NOPASSWD:/home/rhlpyd/aop-projects/codejail-test/myproj-sandbox/bin/python
rhlpyd ALL=(sandbox) SETENV:NOPASSWD:/usr/bin/find
rhlpyd ALL=(ALL) NOPASSWD:/usr/bin/pkill
rhlpyd@nyc:~$ less /etc/apparmor.d/home.rhlpyd.aop-projects.codejail-test.myproj-sandbox.bin.python
#include <tunables/global>
/home/rhlpyd/aop-projects/codejail-test/myproj-sandbox/bin/python {
#include <abstractions/base>
#include <abstractions/python>
/home/rhlpyd/aop-projects/codejail-test/myproj-sandbox/** mr,
# If you have code that the sandbox must be able to access, add lines
# pointing to those directories:
/home/rhlpyd/aop-projects/codejail-test/myproj-sandbox/lib/python2.7/site-packages/** r,
/tmp/codejail-*/ rix,
/tmp/codejail-*/** wrix,
}
--
Rahul