Secure Python

timmy timothy at open-networks.net
Thu Nov 16 19:15:35 EST 2006


Paul Boddie wrote:
> Diez B. Roggisch wrote:
> 
> 
> [Multiplayer game servers]
> 
> 
>>Now how exactly does linux (or any other resource limiting technique on any
>>OS) help here - killing the whole game server surely isn't a desirable
>>solution when one player goes berserk, might it be intentionally or not.
> 

> And this is where the hot topics collide: people want performant
> multitasking with lots of shared state (the global interpreter lock
> controversy) together with sandboxing so that the individual threads
> can't access most of that shared state (the restricted execution
> controversy). 

i'm not talking about sandboxing, that's a whole different kettle of 
fish. i'm talking about resource managment options you can set in for 
instance, the linux kernel.
you can limit the cpu and memory a process uses while still allowing it 
the same access it would have outside of a sandbox. that way if any 
clever monkeys try to dos you they merely consume their alloted quota.



More information about the Python-list mailing list