Secure Python

timmy timothy at open-networks.net
Thu Nov 16 07:10:43 EST 2006


Stephan Kuhagen wrote:
> timmy <"timothy at open-networks.net"> wrote:
> 
> This sub-thread starts to become a flame-war, isn't it? Calm down, both of
> you... No need to fight, when only some ideas for a technical question are
> requested.

i'm not fighting, sometimes i can be a little terse for that i aplogise.

> 
> 
>>as posted before, linux kernel limit.
>>
>>then you and your users can go as crazy as you want and you won't take
>>out your system.
> 
> 
> The problem with linux kernel limits are, that they won't work really good
> on MacOSX and Windows... OTOH the idea is the right one, but the effect can
> be achieved inside of Python. Since Python does byte compile the code and
> the interpreter evaluates each byte code token in one evaluation step. The
> interpreter could be extended for such usecases to count and limit the
> number of evaluation steps allowed for untrusted script or methods in
> untrusted script as well as to limit the recursion depth or memory to be
> allocated. 

idunno sounds like a lot of trouble to engineer a solution that has 
already got a solution. all win NT systems have resource managment and i 
imagine OS X would as well??

> 
> Regards
> Stephan
> 



More information about the Python-list mailing list