Now that rexec is gone...

Rainer Deyke rainerd at eldwood.com
Sat Sep 27 20:46:22 CEST 2003


Terry Reedy wrote:
> Suggest you google last year of c.l.py for 'rexec'.  Also check out
> py-dev summaries of last fall for discussion of why removed.

I see... It turns out that, short of modifying the Python interpreter, there
is no way to get real security.  '"".__class__' gives access to 'str', 'str'
gives access to 'object', and 'object' gives access to 'file'.


-- 
Rainer Deyke - rainerd at eldwood.com - http://eldwood.com






More information about the Python-list mailing list