Path: csiph.com!usenet.pasdenom.info!news.redatomik.org!newsfeed.xs4all.nl!newsfeed2a.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <lac@openend.se>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.001
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'subject:Python': 0.05; 'received:openend.se': 0.09; 'received:theraft.openend.se': 0.09; 'runtime': 0.09; 'cc:addr:python-list': 0.10; 'language,': 0.11; 'question.': 0.13; 'interpreter': 0.15; 'cc:addr:lac': 0.16; 'cc:addr:openend.se': 0.16; 'from:addr:lac': 0.16; 'from:addr:openend.se': 0.16; 'from:name:laura creighton': 0.16; 'generated,': 0.16; 'message-id:@fido.openend.se': 0.16; 'received:89.233': 0.16; 'received:89.233.217': 0.16; 'received:89.233.217.133': 0.16; 'received:fido': 0.16; 'received:fido.openend.se': 0.16; 'rewriting': 0.16; 'laura': 0.18; 'stefan': 0.18; 'language': 0.19; 'work,': 0.21; 'cc:addr:python.org': 0.21; 'cc:2**1': 0.22; 'either.': 0.22; '2015': 0.23; 'sat,': 0.23; 'header:In-Reply-To:1': 0.24; 'mostly': 0.27; '+0200,': 0.27; 'received:se': 0.29; 'cc:no real name:2**1': 0.29; 'that.': 0.30; 'problem': 0.33; 'wrong': 0.35; 'could': 0.35; 'but': 0.36; 'smaller': 0.36; 'subject:: ': 0.37; 'charset:us-ascii': 0.37; 'level': 0.37; 'your': 0.60; 'entire': 0.61; 'header:Message-Id:1': 0.62; 'here': 0.66; 'potentially': 0.67; 'price': 0.68; 'received:89': 0.80; 'hand.': 0.84; 'proposition': 0.93
To: Stefan Behnel <stefan_ml@behnel.de>
cc: python-list@python.org, lac@openend.se
From: Laura Creighton <lac@openend.se>
Subject: Re: Creating a reliable sandboxed Python environment
In-Reply-To: Message from Stefan Behnel <stefan_ml@behnel.de> of "Sat, 30 May 2015 20:42:49 +0200." <mkd0bb$47a$1@ger.gmane.org>
References: <60b424a2-2273-42b2-b60c-92656af0afa5@googlegroups.com> <mk7ng1$uq3$1@ger.gmane.org> <CAPTjJmpC40fLdmGvMqCGtt82O5QWzNGyHnSGgiX_mNrz3O_LdA@mail.gmail.com> <mk90bq$dn4$1@ger.gmane.org> <mailman.160.1432885273.5151.python-list@python.org> <87h9qvxmh0.fsf@jester.gateway.sonic.net> <mailman.210.1432939749.5151.python-list@python.org> <878uc6yhtq.fsf@jester.gateway.sonic.net> <mailman.213.1432953735.5151.python-list@python.org> <874mmuy8ko.fsf@jester.gateway.sonic.net><55697c1f$0$13013$c3e8da3$5496439d@news.astraweb.com> <201505301124.t4UBOnPb020332@fido.openend.se><mkd0bb$47a$1@ger.gmane.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <432.1433019288.1@fido>
Date: Sat, 30 May 2015 22:54:48 +0200
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.3.9 (theraft.openend.se [89.233.217.130]); Sat, 30 May 2015 22:54:55 +0200 (CEST)
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.20+
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.231.1433019310.5151.python-list@python.org>
Lines: 15
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1433019310 news.xs4all.nl 2961 [2001:888:2000:d::a6]:58614
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:91543

In a message of Sat, 30 May 2015 20:42:49 +0200, Stefan Behnel writes:

>So here the cost of security is actually rewriting the entire language
>runtime and potentially also major parts of its ecosystem? Not exactly a
>cheap price either.
>
>Stefan

Well, the runtime is mostly generated, you don't have to write it by
hand.  But, yes, writing an interpreter is work, no question.  I think
that the problem of writing an interpreter is a much smaller proposition
than playing whack-a-mole with language level sandboxing, but depending
on your language, I could be wrong about that.

Laura