Prevent Modification of Script?

2007-04-04 Thread ts-dev
Is it possible to prevent modification of a python file once its been
deployed?  File permissions of the OS could be used..but that doesn't
seem very secure.

The root of my question is verifying the integrity of the application
and the scripts being run. Is this possible, if so, how?

-- 
http://mail.python.org/mailman/listinfo/python-list


Re: Prevent Modification of Script?

2007-04-04 Thread ts-dev
On Apr 4, 6:10 pm, Michael Ekstrand <[EMAIL PROTECTED]> wrote:
> One significant factor: are you worried about other
> users on your systems (or other users who share systems with you under a
> third party's control), or are you worried about what people will do on
> their own systems?

Michael, Ben & others:
The short answer is others on a shared system, or malware that could
modify the scripts.

I'm new to python programming and there are just some paradigms I'm
having trouble grasping.
If the scripts can be modified (very easily), how can the application
be trusted?

i.e. If its an address book, then it would be trivial for malware to
modify the script to override data or send it somewhere else...
It would also seem like it makes user authentication through a
password/ username, or encryption useless.  The script could easily be
modified to by-pass authentication and encryption could be disabled.

Please correct any wrong assumptions that I might be making..

In a compiled application its not impossible to by pass the code.. but
its not so easy.  Perhaps this is just a side-effect of being a
scripted language - not a flaw, just me trying to use it for something
its not well suited for.

- Kiel

-- 
http://mail.python.org/mailman/listinfo/python-list


Re: Hide the python-script from user

2007-04-06 Thread ts-dev
On Apr 6, 3:19 pm, hlubenow <[EMAIL PROTECTED]> wrote:
> recently there was a thread about hiding the python-script from the user.
> The OP could use

Interesting - thanks

-- 
http://mail.python.org/mailman/listinfo/python-list