[pypy-dev] Sandboxing questions

[VanL]

I have a couple questions about the sandboxing feature:

- Currently this is a two-process model, but early on the assertion was 
made that this could be done in a single process, perhaps but not 
necessarily separated by two OS-level threads. Is this (still?) true? 
What would you need to invoke to create such a pypy?

- How granular can the control on imported/run functions be? Can you 
have a full interpreter that does everything, or an interpreter that 
allows socket access and that is it?

Thanks,

Van