rexec and bastion

[Fredrik Lundh]

Kay Schluehr wrote:

> Cited from Python-doc ( v.2.3 )
>
> [Warning:  In Python 2.3 these modules have been disabled due to
> various known and not readily fixable security holes. The modules are
> still documented here to help in reading old code that uses the rexec
> and Bastion modules.]
>
> My question about rexec and bastion may be anachronistic but I did not
> found much explanation, why rexec and bastion are swiss cheese? It may
> be helpfull to resume the problems to learn from them.

is google down today?

    http://www.amk.ca/python/howto/rexec/rexec.html

says

    For discussion of the problems with rexec, see the python-dev threads
    starting at the following URLs:
    http://mail.python.org/pipermail/python-dev/2002-December/031160.html
    and http://mail.python.org/pipermail/python-dev/2003-January/031848.html

</F>