Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder1.news.weretis.net!feeder.erje.net!1.eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.003
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'python,': 0.02; 'api.': 0.04; 'subject:Python': 0.05; 'nicely': 0.07; 'attempted': 0.09; 'objects.': 0.09; 'runtime': 0.09; 'cc:addr:python-list': 0.10; 'python': 0.11; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'guess.': 0.16; 'lookups.': 0.16; 'price,': 0.16; 'unicode?': 0.16; 'wrote:': 0.16; 'attribute': 0.18; 'stefan': 0.18; 'language': 0.19; 'library': 0.20; '(or': 0.21; 'cc:2**0': 0.21; 'cc:addr:python.org': 0.21; 'so.': 0.22; 'oriented': 0.22; 'am,': 0.23; '2015': 0.23; "i've": 0.24; 'header:In-Reply-To:1': 0.24; 'script': 0.25; 'small,': 0.27; 'message- id:@mail.gmail.com': 0.28; "doesn't": 0.28; 'this.': 0.28; 'skip:( 20': 0.28; 'embed': 0.29; 'fri,': 0.31; "i'd": 0.31; 'code': 0.31; 'anyone': 0.32; '[1]': 0.32; 'lets': 0.33; 'though.': 0.33; 'add': 0.34; 'received:google.com': 0.34; 'gives': 0.35; 'really': 0.35; 'list': 0.35; 'handle': 0.36; 'but': 0.36; 'quite': 0.37; 'subject:: ': 0.37; 'level': 0.37; 'is,': 0.38; 'application': 0.39; 'easily': 0.39; 'some': 0.40; 'your': 0.60; 'even': 0.61; 'hear': 0.62; 'email addr:gmail.com': 0.64; 'chrisa': 0.84; 'weaker': 0.84; 'whitelist': 0.84; 'to:none': 0.90; 'approach.': 0.91; 'ask,': 0.91; 'dare': 0.91; 'serious': 0.97
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=r24N/4wOlE7qZ3Uz8AxuhGaNjSGnksrK1wbjbG84qp4=; b=u6okabg1zTmBUY8ciQUX2JKcPdn/L8MjF8lWioL1BASIixiKYxQaBuqJzh7mxsmY/y 7qMiW+kNtzN1NOTa2Sg4sRMdbxan9zDTvJD2TkNdNR8vHF4MVJ8kxUvJaEhn0AWO1mnP +T7ZlRVv1+BQ4WCEN2X/sEILgWC4aCje9bdYoQgVjM/WpayrLNYQ0NEHgKiVGknVvl9g QojHRByDKFWGE5Q8nQkFdCDP5h/qf9M4k2FygCPK9S+6RHR4BP8DzKuiyFHU5kOT0WMN 3IXF4lvTFOpMMbxADN9gKE8rNOtBQ0cGPBSnRYjnMVe6idr/kv29dnKECQ8P5C8QLiwf 6oXg==
MIME-Version: 1.0
X-Received: by 10.43.39.1 with SMTP id tk1mr10950946icb.26.1432839067633; Thu, 28 May 2015 11:51:07 -0700 (PDT)
In-Reply-To: <mk7ng1$uq3$1@ger.gmane.org>
References: <60b424a2-2273-42b2-b60c-92656af0afa5@googlegroups.com> <mk7ng1$uq3$1@ger.gmane.org>
Date: Fri, 29 May 2015 04:51:07 +1000
Subject: Re: Creating a reliable sandboxed Python environment
From: Chris Angelico <rosuav@gmail.com>
Cc: "python-list@python.org" <python-list@python.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.20+
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.139.1432839075.5151.python-list@python.org>
Lines: 22
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1432839075 news.xs4all.nl 2961 [2001:888:2000:d::a6]:52090
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:91384

On Fri, May 29, 2015 at 4:41 AM, Stefan Behnel <stefan_ml@behnel.de> wrote:
> davidfstr@gmail.com schrieb am 26.05.2015 um 04:24:
>> Has anyone on this list attempted to sandbox Python programs in a
>> serious fashion? I'd be interested to hear your approach.
>
> Not quite sandboxing Python, but I've seen people use my Lupa [1] library
> for this. They're writing all their code in Python, and then let users
> embed their own Lua code into it to script their API. The Lua runtime is
> apparently quite good at sandboxing, and it's really small, just some 600KB
> or so. Lupa then lets you easily control the access to your Python code at
> a whitelist level by intercepting all Python attribute lookups.
>
> It doesn't add much to your application to embed Lua (or even LuaJIT) in
> Python, and it gives users a nicely object oriented language to call and
> orchestrate your Python objects.

Lua's a much weaker language than Python is, though. Can it handle
arbitrary-precision integers? Unicode? Dare I even ask,
arbitrary-precision rationals (fractions.Fraction)? Security comes at
a price, I guess.

ChrisA