[Python-Dev] Implementing restricted Python in Zope2

ranjith kannikara ranjithkannikara at gmail.com
Fri Jul 18 04:40:58 CEST 2008


Hi ,

I am really sorry that I couldn,t make clear in the first mail that
What I actually need. But Shane and my Gsoc mentor Sidnei have already
made it clear I think.

I would like to know how much the AST have been changed on moving from
python2.4 to python 2.5 so that I can bring the corresponding changes
in Zope2 to get it adapted to those changes in the AST. Also the
changes that have come to the builtin function and so which should
have affected the safety of a RestrictedPython sandbox.

As Shane have told a detailed list of such changes can help me than
the "Whats New" doc...

Ranjith.

On Fri, Jul 18, 2008 at 2:43 AM, Benjamin Peterson
<musiccomposition at gmail.com> wrote:
> On Thu, Jul 17, 2008 at 4:10 PM, Sidnei da Silva
> <sidnei at enfoldsystems.com> wrote:
>> On Thu, Jul 17, 2008 at 6:04 PM, Guido van Rossum <guido at python.org> wrote:
>>> Thanks. Then python-dev is *definitely* the wrong forum. :-)
>>
>> Definitely wrong forum for RestrictedPython-specifc questions, but not
>> if you consider those two paragraphs from Shane's email, which clarify
>> that Ranjith is seeking for information on possible AST changes that
>> might have occurred in Python 2.5:
>>
>> """
>> The safety of RestrictedPython has been validated in a somewhat formal
>> process with Python 2.4.  Ranjith is working to validate it with
>> Python 2.5.  He is first working to discover all changes between
>> Python 2.4 and 2.5 that might have affected the safety of a
>> RestrictedPython sandbox. Any changes to the AST, builtin functions,
>> methods of builtin types, etc., need to be evaluated for safety.
>>
>> So, in general, he is looking for detailed lists of changes between
>> Python 2.4 and 2.5--more than the "What's New" doc.
>> """
>
> Then I would recommend he look at Misc/NEWS. If he needs more
> information, *specific* questions will bring the best results.
>
>
>
> --
> Cheers,
> Benjamin Peterson
> "There's no place like 127.0.0.1."
>


More information about the Python-Dev mailing list