restricted environment

K.S.Sreeram sreeram at tachyontech.net
Thu Jul 20 02:24:33 EDT 2006


Gabriele *darkbard* Farina wrote:
> The first attempt to reach my goal was to override the __import__
> function to limit it working on modules that can be used and on custom
> import directories that can be accessed. Then I executed the scripts
> using exec. There is any security problem related to this solution ?

This won't work. Creating a secure restricted execution environment is
very hard. FYI, there is an ongoing discussion on python-dev about a new
attempt at something like rexec for python 2.6+.

[sreeram;]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://mail.python.org/pipermail/python-list/attachments/20060720/ed804728/attachment.sig>


More information about the Python-list mailing list