I'm developing a webIDE for python and I've 2 questions regarding it.
1. How can i disable some of the modules without deleting. e.g I wish
to disable "os" module.
2. How can i force user code to access only his particular folder, I
dont want to create uses in unix, e.g
fp = open(PATH, 'w') # If this PATH is defined then use can access
files else he cant .. is there is any way?
Regards!
iapain
Jul 10 '06
21  1728 
In article <11************ **********@b28g 2000cwb.googleg roups.com>,
iapain <ia****@gmail.c omwrote:
Steven D'Aprano wrote:
Creating a restricted execution environment is *hard*. As far as I know,
even Microsoft has never attempted it. And for all of Sun's resources and
talent, security holes are sometimes found even in Java.
Java is not the only restricted execution environment around.
Javascript, as implemented by most browsers, is an excellent lightweight
restricted execution environment, and there are many browsers which have
good implementations .
Regards
Sreeram
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEs9RGrgn 0plK5qqURAnjvAK C/0kaWmWFI8un4016 RGsNgm+3bggCgnh gh
P3NgiQD1zTVcqaz wkr/qNEc=
=FBpd
-----END PGP SIGNATURE-----
The most knowledgeable people have effectively given up, in
regard to Python.
I guess now I am up with only one option, i.e hope that user input code
wont be evil to the system. **which is rarely possible**
"K.S.Sreera m" <sr*****@tachyo ntech.netwrites :
Java is not the only restricted execution environment around.
Javascript, as implemented by most browsers, is an excellent lightweight
restricted execution environment, and there are many browsers which have
good implementations .
And we hear about browser security bugs all the time, for which the
workaround is "shut off javascript".
Cameron Laird wrote:
In article <11************ **********@b28g 2000cwb.googleg roups.com>,
iapain <ia****@gmail.c omwrote:
.
.
.
>>Does that mean there is no way to implement restricted enviorment?
.
.
.
The most knowledgeable people have effectively given up, in
regard to Python.
Brett Cannon is currently trying to come up with a comprehensive spec
and implementation of a sandboxed Python interpreter, for use in
Mozilla as a JavaScript replacement. (look in the python-dev archives
for more)
Georg
Brett Cannon is currently trying to come up with a comprehensive spec
and implementation of a sandboxed Python interpreter, for use in
Mozilla as a JavaScript replacement. (look in the python-dev archives
for more)
I'm not sure he is working or not, latest i read was he purposed new
restricted enviornment for python.
Best!
Georg Brandl wrote:
Cameron Laird wrote:
In article <11************ **********@b28g 2000cwb.googleg roups.com>,
iapain <ia****@gmail.c omwrote:
.
.
.
>Does that mean there is no way to implement restricted enviorment?
.
.
.
The most knowledgeable people have effectively given up, in
regard to Python.
also relevant is the 2 "Try python" online shells that were discussed
last January or so http://groups.google.com/group/comp....0?q=trypython&
On 11 Jul 2006 10:19:22 -0700 in comp.lang.pytho n, Paul Rubin
<http://ph****@NOSPAM.i nvalidwrote:
>"K.S.Sreeram " <sr*****@tachyo ntech.netwrites :
>Java is not the only restricted execution environment around.
Javascript, as implemented by most browsers, is an excellent lightweight
restricted execution environment, and there are many browsers which have
good implementations .
And we hear about browser security bugs all the time, for which the
workaround is "shut off javascript".
And Java...
Regards,
-=Dave
--
Change is inevitable, progress is not.
Paul Rubin wrote:
"K.S.Sreera m" <sr*****@tachyo ntech.netwrites :
>Java is not the only restricted execution environment around.
Javascript, as implemented by most browsers, is an excellent lightweight
restricted execution environment, and there are many browsers which have
good implementations .
And we hear about browser security bugs all the time, for which the
workaround is "shut off javascript".
They all have bugs (including java), but atleast the architecture itself
isnt flawed (unlike say, ActiveX).
Anyways, the point I was trying to make is that, Sun is not the only one
to have implemented a restricted execution environment. Opera, Mozilla,
Safari etc,have all done it.
Regards
Sreeram
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEtDp/rgn0plK5qqURAo6 gAJ496tWGJmmKTg a2MtscI41uiL6+W ACaA7C5
DxcvH4TIwQEQBCE ZuPXA95Y=
=X1ju
-----END PGP SIGNATURE-----
Do you have an IBM s/370 running VM/CMS? VM was sort of an OS for
running multiple OSs, so it would be the "restricted environment" <G>
I'm having currently working on OS/2 and Linux platform, I've designed
a web based ide for python and i wish to restrict some commands and
user can only access i.e rwx in his folder.
Best! This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Sean R. Lynch |
last post by:
I've been playing around with Zope's RestrictedPython, and I think I'm
on the way to making the modifications necessary to create a
capabilities-based restricted execution system. The idea is to strip out
any part of RestrictedPython that's not necessary for doing capabilities
and do all security using just capabilities.
The basic idea behind capabilities is that you don't give any piece of
code you don't trust a reference to something...
|
by: Rolf Magnus |
last post by:
Hi,
I would like to embed a python interpreter within a program, but since that
program would be able to automatically download scripts from the internet,
I'd like to run those in a restricted environment, which basically means
that I want to allow only a specific set of modules to be used by the
scripts, so that it wouldn't be possible for them to remove files from the
hard drive, kill processes or do other nasty stuff.
Is there any...
|
by: sriram |
last post by:
Hi,
I am seeing a weird problem with DB2 8.2. When we connect to the
database using the following command in db2 CLP
db2 connect to <dbname> user <user> using <passwd>
I get the following error,
"userid disabled or restricted"
|
by: Julian V. Noble |
last post by:
Dear C Mavens,
Anyone here getting hosts of spam with nefarious attachments,
purporting to be from M$ or its lackeys, into your mailbox?
I neglected to spoof my header, and since Hurricane Isabel
I have gotten well over 10K such messages.
--
|
by: Peter Ammon |
last post by:
It's my understanding that the printf() function is declared as
int printf(const char * restrict format, ...);
in stdio.h. And loosely speaking, if a parameter is declared as
restricted, then accesses to the object must go through that parameter.
Does this mean that
printf("%s", "%s");
| | |
by: Jussi |
last post by:
Hi!
I have a COM server object in which I have set certain interfaces
restricted/hidden. For example
With VB client these attributes works as excpected. However if I use this
same COM component from C# client hidden/restricted attributes seems to have
no effect. Is there any way to restrict C# client's access to certain
|
by: Kiran_Juikar |
last post by:
In my application, I want to copy some file from network location to local
machine folder. It works fine for administrator but If I run it with
restricted user (not having permissions to local machine folder) it gives me
Access denied error.
How can I programmatically give permission to the foder for restrcited user.
|
by: Steve |
last post by:
Hi All
I have several vb.net 2005 apps which have run fine until now
A new customer has set up windows XP with restricted users
When my application starts I get errors, when accessing the registry etc,
due to insufficent rights for the user
If I create a keyfile and set my app to full trust in project settings, many
|
by: Spiros Bousbouras |
last post by:
Is there a way to mimick restricted pointers
using array syntax ? So I'm looking for something
to add to a statement such as "int arr" which
will tell the compiler that I will only access the contents of the
array through arr. If I was using
pointers I would do for example
int * restrict p = malloc(50 * sizeof(int))
Is there a way to do the same thing using
arrays ?
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| | |
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
