On Sep 18, 5:20 am, Paul Boddie <[EMAIL PROTECTED]> wrote:
> On 17 Sep, 22:18, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]>
> wrote:
>
> > On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote:
>
> > >http://wiki.python.org/moin/How_can_I_run_an_untrusted_Python_script_...)
>
> > These solu
On 17 Sep, 22:18, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]>
wrote:
> On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote:
>
> >http://wiki.python.org/moin/How_can_I_run_an_untrusted_Python_script_...)
>
> These solutions have at least the same bugs that the bare bones
> solution in the
On Sep 17, 6:06 pm, greg <[EMAIL PROTECTED]> wrote:
> Aaron "Castironpi" Brady wrote:
> > Even a function created from raw bytecode string can't do anything
> > without __import__ or 'open'.
>
> Not true:
>
> for cls in (1).__class__.__bases__[0].__subclasses__():
> if cls.__name__ == "file
Aaron "Castironpi" Brady wrote:
Even a function created from raw bytecode string can't do anything
without __import__ or 'open'.
Not true:
for cls in (1).__class__.__bases__[0].__subclasses__():
if cls.__name__ == "file":
F = cls
F(my_naughty_path, "w").write(my_naughty_data)
On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote:
> On 17 Sep, 07:26, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]>
> wrote:
>
> > Sometimes questions come up on here about unpickling safely and
> > executing foreign code. I was thinking a minimum install that didn't
> > even have acce
On 17 Sep, 07:26, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]>
wrote:
> Sometimes questions come up on here about unpickling safely and
> executing foreign code. I was thinking a minimum install that didn't
> even have access to modules like 'os' could be safe. (Potentially.)
> I have time t
Sometimes questions come up on here about unpickling safely and
executing foreign code. I was thinking a minimum install that didn't
even have access to modules like 'os' could be safe. (Potentially.)
I have time to entertain this a little, though all the devs are busy.
I can bring it up again i