[Python-Dev] rexec.py unuseable

Jeremy Hylton jeremy at alum.mit.edu
Mon Dec 15 16:36:35 EST 2003


One kind of problem is that newer Python features were designed without
taking rexec into account.  It's possible for untrusted code to cause
the trusted interpreter to execute its code without restriction using
descriptors.  It would be really difficult to reconcile new-style
classes and rexec.  Perhaps a worthwhile project, but probably one
accomplished by design a new restriction mechanism that builds on some
of the basic mechanism of rexec.

Jeremy





More information about the Python-Dev mailing list