既然rexec已经不存在了,那么在受限制的环境中执行Python的 上是否有任何代码或信息?在我推出自己的 解决方案之前,确切地说rexec中的安全漏洞究竟在哪里? (我知道获得限制环境的一种方法:屠夫Python 解释器通过删除所有甚至远程危险的解释器,使用 Python仅用于限制执行,并在C ++中执行其他所有操作 嵌入了Python解释器的程序。出于显而易见的原因,我想避免这样做。$ - Rainer Deyke - ra*****@eldwood - eldwood
解决方案" Rainer Deyke" < RA ***** @ eldwood>在消息中写道 news:XA8db.597231
o %2.276974@sccrnsc02 ... 现在rexec已经不见了,在受限制的环境中执行Python时,是否有任何代码或信息可用?在我推出我自己的自己的解决方案之前,究竟rexec中的安全漏洞到底在哪里?
建议你google去年使用clpy来获取''rexec' 。还可以查看去年秋天的 py-dev摘要,讨论为什么要删除。 TJR
Rainer Deyke < RA ***** @ eldwood>写道:
现在rexec已经不见了,在受限制的环境中执行Python是否有任何可用的代码或信息? python-dev上有一个关于Zope'版本的rexec (RestrictedPython?)的帖子,在随意检查中看起来很有希望。 干杯, mwh - 如果你在椅子上旋转,它可能引起我的注意, 用舌头说话,用绿色小妖精的喷气机喷射。我可以安排这个。 ;-) - Barry Warsaw& Fred Drake
Now that rexec is gone, is there any code or information available on executing Python in a restricted environment? And before I roll my own solution, exactly where the security holes in rexec anyway? (I know one way of getting a restricted environment: butcher the Python interpreter by removing everything that''s even remotely dangerous, use Python only for restricted execution, and do everything else in a C++ program that embeds the butchered Python interpreter. I''d like to avoid doing that, for obvious reasons.) -- Rainer Deyke - ra*****@eldwood - eldwood
解决方案 "Rainer Deyke" <ra*****@eldwood> wrote in message news:XA8db.597231o%2.276974@sccrnsc02... Now that rexec is gone, is there any code or information available on executing Python in a restricted environment? And before I roll my own solution, exactly where the security holes in rexec anyway?Suggest you google last year of c.l.py for ''rexec''. Also check out py-dev summaries of last fall for discussion of why removed. TJR
"Rainer Deyke" <ra*****@eldwood> writes: Now that rexec is gone, is there any code or information available on executing Python in a restricted environment? There was a thread on python-dev about Zope''s version of rexec (RestrictedPython?) which looked promising on casual inspection. Cheers, mwh -- It might get my attention if you''d spin around in your chair, spoke in tongues, and puked jets of green goblin goo.I can arrange for this. ;-) -- Barry Warsaw & Fred Drake
更多推荐
现在rexec已经不见了......
发布评论