Now that rexec is gone...
Rainer Deyke
rainerd at eldwood.com
Sat Sep 27 14:46:22 EDT 2003
Terry Reedy wrote:
> Suggest you google last year of c.l.py for 'rexec'. Also check out
> py-dev summaries of last fall for discussion of why removed.
I see... It turns out that, short of modifying the Python interpreter, there
is no way to get real security. '"".__class__' gives access to 'str', 'str'
gives access to 'object', and 'object' gives access to 'file'.
--
Rainer Deyke - rainerd at eldwood.com - http://eldwood.com
More information about the Python-list
mailing list