Does "sudo" sanitize the environment?  Imagine that the user can set
PYTHONPATH, PYTHONINSPECT, etc.

Beyond that, you have the same problems as with any code that runs with
"extra privileges".  Can the user supply any code that is fed to
patently unsafe primitives (like the unpickler, eval() or the exec
statement)?  If your program opens files with user-controlled names, did
you make all the right checks?

Jeff

Attachment: pgpLhnjBDThEJ.pgp
Description: PGP signature

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to