[Ironpython-users] [main] -X:Sandbox command line argument (#61)

Cesar Mello cmello at gmail.com
Wed Mar 28 01:32:51 CEST 2012

And hey if there is no one interested, no problem: I'll start filling work
items for the issues using small programs to reproduce. For example, the
problem with the decimal module when running with Internet Zone permissions.

And then I'll do my best to help fixing those issues.

Best regards!

On Tue, Mar 27, 2012 at 8:29 PM, Cesar Mello <cmello at gmail.com> wrote:

> Hi,
> Our product is not related to ASP.NET. We only need users to script
> calculations in a safe environment. They should not be able to run native
> code, access the filesystem or do any other harm to the application.
> The default InternetZone permission set seems to be nice for that. The
> calculations run fine, except for the decimal module. The whole idea to
> have sandbox in ipy.exe was just to make it easier to debug, test and
> reproduce any problems.
> I just scratched the app domain setup in pull request 61<https://github.com/IronLanguages/main/pull/61>.
> But this is only a small first step I thought about to start people looking
> at what needs to be changed. For example, should the access to
> IronPython.Runtime.PythonContext. be refactored, or should its reference
> be marshaled accross app domains? Unfortunately I don't have enough
> knowledge to do this kind of refactor alone, or at least I don't think the
> time I would need to implement this alone would pay off... So my question
> is: is there anyone else interested in implementing sandbox in ipy.exe? If
> there is more interest, I'll do a branch and we can work together.
> Thank you a lot for the attention.
> Best regards
> Mello
> On Tue, Mar 27, 2012 at 12:47 PM, Slide <slide.o.mix at gmail.com> wrote:
>> Moving this to the mailing list....
>> Are you (the OP) developing something that is going to run in ASP.NET?
>> For this type of thing, I believe you can host the ASP.NET runtime in an
>> application, so that may be the way to go for that.
>> slide
>> On Tue, Mar 27, 2012 at 8:14 AM, Jeff Hardy <
>> reply+i-3734327-e72caf099069ec510a8bcf5eda4b8e84f5c86061-55871 at reply.github.com
>> > wrote:
>>> Sorry about that, I've been busy the last couple of days.
>>> I think it's a feature that would be really useful, but without knowing
>>> how to extend it to cover different sandboxes it would be best to hold off.
>>> What you can do is create a new branch in your git repo, push it to github,
>>> and then if if you (or someone else) gets ambitious they can take it up and
>>> run with it.
>>> If you need some help with the git commands let me know. I'm going to
>>> close this for now, but I really do appreciate the work you've put into
>>> this. I just don't think the problem space is understood well enough to
>>> implement it yet.
>>> ---
>>> Reply to this email directly or view it on GitHub:
>>> https://github.com/IronLanguages/main/pull/61#issuecomment-4718614
>> --
>> Website: http://earl-of-code.com
>> _______________________________________________
>> Ironpython-users mailing list
>> Ironpython-users at python.org
>> http://mail.python.org/mailman/listinfo/ironpython-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ironpython-users/attachments/20120327/149eba71/attachment.html>

More information about the Ironpython-users mailing list