Now that rexec is gone...

Jacek Generowicz jacek.generowicz at cern.ch
Mon Sep 29 12:14:35 CEST 2003


"Rainer Deyke" <rainerd at eldwood.com> writes:

> Terry Reedy wrote:
> > Suggest you google last year of c.l.py for 'rexec'.  Also check out
> > py-dev summaries of last fall for discussion of why removed.
> 
> I see... It turns out that, short of modifying the Python interpreter, there
> is no way to get real security.  '"".__class__' gives access to 'str', 'str'
> gives access to 'object', and 'object' gives access to 'file'.

A message-id, or similar, at this point, could save future googlers a
lot of time ...




More information about the Python-list mailing list