Michael Foord <mich...@voidspace.org.uk> added the comment:

This is similar to an issue I reported to the security team (same underlying 
issue). My concern was that with an admin installed version of Python an 
arbitrary user can modify site.py, or create sitecustomize.py, and cause 
arbitrary code execution when the admin runs Python.

IMO an admin installed Python should require admin priveleges to write to the 
Python install directory. I think many users would find installing to "Program 
Files" a pain and it would break many scripts.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue1284316>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to