Downloads & Free Reading Options - Results

With the increasing availability of public cloud computing facilities and scientific super computers, there is a great potential for making R available through public or shared resources. This allows researchers to efficiently run code requiring a lot of cycles and memory, or embed R functionality into e.g. systems or web services. However some important security concerns need to be addressed before this can be put in production. The prime use case in the design of R has always been single statistician running R on the local machine through the interactive console. As a result there are practically no restrictions on what the user is allowed to do with the operating system, which could potentially result in malicious behavior or excessive use of hardware resources in a shared environment. Properly securing an R process turns out to be a complex problem. We describe several approaches and illustrate potential issues using some of our personal experiences in hosting public web services. Finally we introduce the RAppArmor package which provides a Linux based reference implementation for dynamic sandboxing in R on the level of the operating system.