[Python-Dev] Extending startup code: PEP needed?

[Guido van Rossum]

Discussions based on Python running as root and picking up untrusted
code from $PYTHONPATH are pointless.  Of course this is a security
hole.  If root runs *any* Python script in a way that could pick up
even a single untrusted module, there's a security hole.  site.py or
*.pth files are just a special case of this, so I don't see why this
is used as an example.

--Guido van Rossum (home page: http://www.python.org/~guido/)