How to limit ipython notebook directory access

Question

I'm running ipython notebook server on the cloud and i want to expose this as a service so that users can play around with the notebook, i noticed that using notebook i can access the filesystem and inspect files on the filesystem, i want to limit this access.I want only special folders to be accessible from ipython notebook.

Answer 1

You can launch your iPython notebook in the folder that you want the server to have access to, and the user won't be able to go to the parent directory, but you should realize that when the user launches a kernel, they will be able to chdir to any folder in the file system.

So if you want to limit access to users of the iPython notebook, you should use unix file permissions to jail the user to their starting folder.

The way I would do this is to:

• Create an ipython user that doesn't belong to any existing user groups
• Create a folder for the ipython user (cloud for instance)
• Launch the iPython notebook as ipython in the cloud folder