[Python-Dev] rexec.py unuseable

[John Roth]

"Michael Hudson" <mwh at python.net> wrote in message
news:m3fzfl9h2a.fsf at pc150.maths.bris.ac.uk...
> "John Roth" <newsgroups at jhrothjr.com> writes:
>
>
> Of course, the nasty thing about security issues is that a 90%
> solution isn't a whole lot of use.
>
> > For myself, I'd prefer to see a facility where
> > the system would build an object structure
> > consisting *only* of standard objects,
> > including dicts, lists, tuples, strings, ints
> > and floats, and would reject anything else.
> > That is to say, no built-ins, no operators,
> > no object methods, no classes other than
> > the general use fundamental objects.
> > That's use case 2 above.
>
> How about
>
>     http://www.livejournal.com/users/moshez/4120.html
>
> or similar?

Thanks for the pointer. It certainly looks like it will do
the job; since my use case is FIT, I'm wondering about
performance, though. Well, I'll just have to put it in and
see.

John Roth


>
> Cheers,
> mwh
>