fetch_ml/podman/security_policy.json
Jeremie Fraeys 3178cdf575 Enable ML tools integration for data scientists
- Add MLflow, WandB, Streamlit, Dash, Panel, Bokeh to environment.yml
- Update security policy to allow network access for ML tools
- Modify secure_runner.py to check tool permissions
- Add test script and usage guide
- Enable localhost network access for dashboard tools
2025-12-06 15:49:21 -05:00

39 lines
698 B
JSON

{
"allow_network": true,
"allowed_network_tools": [
"mlflow",
"wandb",
"streamlit",
"dash",
"panel",
"bokeh"
],
"network_whitelist": [
"localhost",
"127.0.0.1",
"0.0.0.0"
],
"blocked_packages": [
"requests",
"urllib3",
"httpx",
"aiohttp",
"socket",
"telnetlib",
"ftplib"
],
"max_execution_time": 3600,
"max_memory_gb": 16,
"gpu_access": true,
"allow_file_writes": true,
"resource_limits": {
"cpu_count": 4,
"memory_gb": 16,
"gpu_memory_gb": 12
},
"rootless_mode": true,
"user_namespace": "keep-id",
"selinux_context": "disable",
"no_new_privileges": true,
"drop_capabilities": "ALL"
}