Hello, 

 

On our Pyramid installation, we're looking to host multiple tenants. However, we've encountered an issue where we can access the host's file system through Pyramid, regardless of the security settings in place. This poses a significant security risk as a tenant's data may not be secure.

 

Through the Python node in Model, we're able to access everything that the user used to run Pyramid. This includes full access to the file system, including the IMDB repositories. Below is an example:

 

Here's a script that reads the file system, providing all files, the current user, and file access details:

import os

import subprocess

import pandas as pd

import getpass

 

def list_files(start_path):

file_info = []

for root, dirs, files in os.walk(start_path):

for name in files:

file_path = os.path.join(root, name)

ls_output = subprocess.check_output(['ls', '-ahl', file_path]).decode('utf-8')

user_name = getpass.getuser()

file_info.append({'File_Name': name, 'File_Path': file_path, 'User_Name': user_name, 'LS_Output': ls_output})

for name in dirs:

dir_path = os.path.join(root, name)

ls_output = subprocess.check_output(['ls', '-ahl', dir_path]).decode('utf-8')

user_name = getpass.getuser()

file_info.append({'File_Name': name, 'File_Path': dir_path, 'User_Name': user_name, 'LS_Output': ls_output})

return file_info

 

file_info_list = list_files('/opt/Pyramid/repository/imdata')

 

df = pd.DataFrame(file_info_list)

 

Snippet of the result: 

 

These are the IMDB's.

 

The issue here is that we can gain access to any file on the host and read them if we have the proper access. For the IMDBs, the setup allows for easy creation of a connection to an IMDB, potentially allowing access to another tenant's data.

 

How can we ensure that this does not happen and that our clients' data remains secure?