Skip to content

[ML] Restrict file system access for pytorch models#2851

Merged
valeriy42 merged 12 commits intoelastic:mainfrom
valeriy42:enhancement/seccomp-pytorch-filter
Apr 30, 2025
Merged

[ML] Restrict file system access for pytorch models#2851
valeriy42 merged 12 commits intoelastic:mainfrom
valeriy42:enhancement/seccomp-pytorch-filter

Conversation

@valeriy42
Copy link
Copy Markdown
Contributor

@valeriy42 valeriy42 commented Apr 24, 2025

This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

@valeriy42 valeriy42 added the ci:run-qa-tests Run a subset of the QA tests label Apr 25, 2025
@valeriy42 valeriy42 closed this Apr 29, 2025
@valeriy42 valeriy42 reopened this Apr 29, 2025
@valeriy42 valeriy42 changed the title [ML] Add pytorch seccomp filter on Linux [ML] Restrict filesystem access for pytorch models Apr 29, 2025
@valeriy42 valeriy42 changed the title [ML] Restrict filesystem access for pytorch models [ML] Restrict file system access for pytorch models Apr 29, 2025
@valeriy42 valeriy42 marked this pull request as ready for review April 29, 2025 11:56
@valeriy42 valeriy42 requested a review from davidkyle April 29, 2025 11:56
@valeriy42 valeriy42 added the :ml label Apr 29, 2025
Copy link
Copy Markdown
Member

@davidkyle davidkyle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@elastic-sonarqube
Copy link
Copy Markdown

@valeriy42 valeriy42 merged commit fff4062 into elastic:main Apr 30, 2025
16 checks passed
@valeriy42 valeriy42 deleted the enhancement/seccomp-pytorch-filter branch April 30, 2025 08:52
valeriy42 added a commit to valeriy42/ml-cpp that referenced this pull request Apr 30, 2025
This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)
valeriy42 added a commit to valeriy42/ml-cpp that referenced this pull request Apr 30, 2025
This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)
valeriy42 added a commit to valeriy42/ml-cpp that referenced this pull request Apr 30, 2025
This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)
valeriy42 added a commit to valeriy42/ml-cpp that referenced this pull request Apr 30, 2025
This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)
@valeriy42
Copy link
Copy Markdown
Contributor Author

💚 All backports created successfully

Status Branch Result
9.0
8.19
8.18
8.17

Questions ?

Please refer to the Backport tool documentation

valeriy42 added a commit that referenced this pull request May 2, 2025
…2855)

* [ML] Restrict file system access for pytorch models (#2851)

This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)

* Update CHANGELOG.asciidoc

* rewrite for C++14 compatibility
valeriy42 added a commit that referenced this pull request May 2, 2025
…2854)

* [ML] Restrict file system access for pytorch models (#2851)

This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)

* rewrite for C++14 compatibility
valeriy42 added a commit that referenced this pull request May 2, 2025
…2853)

* [ML] Restrict file system access for pytorch models (#2851)

This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)

* rewrite for C++14 compatibility
valeriy42 added a commit that referenced this pull request May 2, 2025
This PR ensures that the PyTorch models are not allowed to access the file system. It accomplishes the goal by inspecting the model's operations and prohibiting the loading of models with operations that read or write files.

(cherry picked from commit fff4062)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants