Re: Challenge: escape from the pysandbox

2010-03-04 Thread Nobody
On Wed, 03 Mar 2010 03:37:44 +0100, Victor Stinner wrote: >> I see, makes perfect sense. This then raises the question whether it's >> important to have a 100% fool proof python sandbox without help from >> the OS, or this goal is not only too ambitious but also not really a >> useful one. > > T

Re: Challenge: escape from the pysandbox

2010-03-02 Thread Victor Stinner
Le dimanche 28 février 2010 17:43:07, Victor Stinner a écrit : > Yes, Google AppEngine has its Python sandbox and the source code is > available online. I don't know the license. I found 7 vulnerabilities in 1 > hour :-) I contacted Google security team. (...) There are other > differences, but

Re: Challenge: escape from the pysandbox

2010-03-02 Thread Victor Stinner
Le dimanche 28 février 2010 23:40:59, Daniel Fetchinson a écrit : > >>I guess they also have some kind of a sandbox if they let people run > >>python on their machines, I'm not sure if it's open source though. > > > > Thing is, I'm sure that Google uses a critical backstop to any > > Python-based s

Re: Challenge: escape from the pysandbox

2010-02-28 Thread Daniel Fetchinson
>>I guess they also have some kind of a sandbox if they let people run >>python on their machines, I'm not sure if it's open source though. > > Thing is, I'm sure that Google uses a critical backstop to any > Python-based sandbox: something like a chroot jail. The Python sandbox > is mostly there

Re: Challenge: escape from the pysandbox

2010-02-28 Thread Aahz
In article , Daniel Fetchinson wrote: > >I guess they also have some kind of a sandbox if they let people run >python on their machines, I'm not sure if it's open source though. Thing is, I'm sure that Google uses a critical backstop to any Python-based sandbox: something like a chroot jail. Th

Re: Challenge: escape from the pysandbox

2010-02-28 Thread Victor Stinner
Le samedi 27 février 2010 18:37:22, Daniel Fetchinson a écrit : > It's google's hosting solution called app engine, for python web > applications: http://code.google.com/appengine/docs/python/gettingstarted/ > > I guess they also have some kind of a sandbox if they let people run > python on their

Re: Challenge: escape from the pysandbox

2010-02-27 Thread Daniel Fetchinson
On 2/26/10, Victor Stinner wrote: > Le vendredi 26 février 2010 15:37:43, Daniel Fetchinson a écrit : >> >> pysandbox is a new Python sandbox project >> >> Out of curiosity, the python sandbox behind google app engine is open >> source? If so, how is it different from your project, if not, anyone

Re: Challenge: escape from the pysandbox

2010-02-26 Thread Victor Stinner
Le vendredi 26 février 2010 15:37:43, Daniel Fetchinson a écrit : > >> pysandbox is a new Python sandbox project > > Out of curiosity, the python sandbox behind google app engine is open > source? If so, how is it different from your project, if not, anyone knows > if it will be in the future?

Re: Challenge: escape from the pysandbox

2010-02-26 Thread Daniel Fetchinson
>> pysandbox is a new Python sandbox project Out of curiosity, the python sandbox behind google app engine is open source? If so, how is it different from your project, if not, anyone knows if it will be in the future? Cheers, Daniel -- Psss, psss, put it down! - http://www.cafepress.com/putit

Re: Challenge: escape from the pysandbox

2010-02-26 Thread Victor Stinner
Le vendredi 26 février 2010 13:29:33, Victor Stinner a écrit : > pysandbox is a new Python sandbox project ... I just forget to explain how to download it. Website: http://github.com/haypo/pysandbox/ Download the repository using git: git clone git://github.com/haypo/pysandbox.git or git cl