[Ironpython-users] [main] -X:Sandbox command line argument (#61)

[Cesar Mello]

Hi,

Our product is not related to ASP.NET. We only need users to script
calculations in a safe environment. They should not be able to run native
code, access the filesystem or do any other harm to the application.

The default InternetZone permission set seems to be nice for that. The
calculations run fine, except for the decimal module. The whole idea to
have sandbox in ipy.exe was just to make it easier to debug, test and
reproduce any problems.

I just scratched the app domain setup in pull request
61<https://github.com/IronLanguages/main/pull/61>.
But this is only a small first step I thought about to start people looking
at what needs to be changed. For example, should the access to
IronPython.Runtime.PythonContext. be refactored, or should its reference be
marshaled accross app domains? Unfortunately I don't have enough knowledge
to do this kind of refactor alone, or at least I don't think the time I
would need to implement this alone would pay off... So my question is: is
there anyone else interested in implementing sandbox in ipy.exe? If there
is more interest, I'll do a branch and we can work together.

Thank you a lot for the attention.

Best regards
Mello


On Tue, Mar 27, 2012 at 12:47 PM, Slide <slide.o.mix at gmail.com> wrote:

> Moving this to the mailing list....
>
> Are you (the OP) developing something that is going to run in ASP.NET?
> For this type of thing, I believe you can host the ASP.NET runtime in an
> application, so that may be the way to go for that.
>
> slide
>
>
> On Tue, Mar 27, 2012 at 8:14 AM, Jeff Hardy <
> reply+i-3734327-e72caf099069ec510a8bcf5eda4b8e84f5c86061-55871 at reply.github.com
> > wrote:
>
>> Sorry about that, I've been busy the last couple of days.
>>
>> I think it's a feature that would be really useful, but without knowing
>> how to extend it to cover different sandboxes it would be best to hold off.
>> What you can do is create a new branch in your git repo, push it to github,
>> and then if if you (or someone else) gets ambitious they can take it up and
>> run with it.
>>
>> If you need some help with the git commands let me know. I'm going to
>> close this for now, but I really do appreciate the work you've put into
>> this. I just don't think the problem space is understood well enough to
>> implement it yet.
>>
>> ---
>> Reply to this email directly or view it on GitHub:
>> https://github.com/IronLanguages/main/pull/61#issuecomment-4718614
>>
>
>
>
> --
> Website: http://earl-of-code.com
>
> _______________________________________________
> Ironpython-users mailing list
> Ironpython-users at python.org
> http://mail.python.org/mailman/listinfo/ironpython-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ironpython-users/attachments/20120327/921affd6/attachment.html>