[Python-ideas] CLI option for isolated mode
christian at python.org
Thu Nov 8 23:13:49 CET 2012
I like to propose a new option for the Python interpreter:
It shall start the interpreter in isolated mode which ignores any
environment variables set by the user and any files installed by the
user. The mode segregate a Python program from anything an unpriviliged
user is able to modify and uses only files that are installed by a
The isolated mode implies -E (ignore all PYTHON* environment vars) and
-s (don't add user site directory). It also refrains from the inclusion
of '' or getcwd() to sys.path. TKinter doesn't load and execute Python
scripts from the user's home directory. Other parts of the stdlib should
be checked, too.
The option is intended for OS and application scripts that doesn't want
to become affected by user installed files or files in the current
working path of a user.
The idea is motivated by a couple of bug reports, for example:
https://bugs.launchpad.net/bugs/938869 lsb_release crashed with SIGABRT
http://bugs.python.org/issue16202 sys.path security issues
http://bugs.python.org/issue16248 Security bug in tkinter allows for
untrusted, arbitrary code execution.
More information about the Python-ideas