Secure scripts variables

Florian Lindner Florian.Lindner at xgm.de
Wed Mar 30 09:20:15 EST 2005


Paul Rubin wrote:

> Florian Lindner <Florian.Lindner at xgm.de> writes:
>> I have a script which is readable and executable by a user, but not
>> writable.
>> The users executes the scripts, it reads in a value and based on this
>> value it computes a result and stores it in a variable.
>> Can the user read out the value of this variable? If yes, can he be
>> prevented to do so?
> 
> I don't really understand the question.  The user could, for example,
> run the Python interpreter under a debugger, and examine its internal
> state step by step during execution.
> 
> What you really want is a setuid script.  That can do what you want,
> but you have to write them very carefully.

AFAIK scripts can't be setuid? Can you tell me what you mean and how to do
it?

Florian



More information about the Python-list mailing list