[Python-Dev] Reviving restricted mode?

Isaac Morland ijmorlan at uwaterloo.ca
Wed Aug 13 15:11:15 CEST 2014


On Mon, 11 Aug 2014, Skip Montanaro wrote:

> On Mon, Aug 11, 2014 at 12:42 PM, matsjoyce <matsjoyce at gmail.com> wrote:
>> There maybe some holes in my approach, but I can't find them.
>
> There's the rub. Given time, I suspect someone will discover a hole or two.

Schneier's Law:

 	Any person can invent a security system so clever that she or he can't
 	think of how to break it.

While I would not claim a Python sandbox is utterly impossible, I'm 
suspicious that the whole "consenting adults" approach in Python is 
incompatible with a sandbox.  The whole idea of a sandbox is to absolutely 
prevent people from doing things even if they really want to and know what 
they are doing.

Isaac Morland			CSCF Web Guru
DC 2554C, x36650		WWW Software Specialist


More information about the Python-Dev mailing list