Re: [Python-Dev] The pysandbox project is broken

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.mixmin.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed1.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path	<rosuav@gmail.com>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.002
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'subject:: [': 0.04; 'subject:Python': 0.06; 'javascript,': 0.07; 'apis': 0.09; 'attributes': 0.09; 'namespace': 0.09; 'that).': 0.09; 'python': 0.11; 'wrote': 0.14; 'language.': 0.14; 'c++.': 0.16; 'conclusion:': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'hides': 0.16; 'namespace.': 0.16; 'subject:Dev': 0.16; 'subject:broken': 0.16; 'usage,': 0.16; 'utterly': 0.16; 'wrote:': 0.18; 'wed,': 0.18; 'trying': 0.19; 'subject:project': 0.19; 'subject:] ': 0.20; 'memory': 0.22; 'separate': 0.22; 'switched': 0.24; 'sort': 0.25; "i've": 0.25; 'switch': 0.26; '(for': 0.26; '2010,': 0.27; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'message-id:@mail.gmail.com': 0.30; "i'm": 0.30; 'code': 0.31; '13,': 0.31; 'intellectual': 0.31; 'probably': 0.32; 'critical': 0.32; 'could': 0.34; 'late': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'too': 0.37; 'list': 0.37; 'project': 0.37; 'nov': 0.38; 'whatever': 0.38; 'to:addr:python-list': 0.38; "couldn't": 0.39; 'to:addr:python.org': 0.39; 'either': 0.39; 'called': 0.40; 'free': 0.61; 'full': 0.61; 'matter': 0.61; 'back': 0.62; 'subject:The': 0.64; 'total': 0.65; 'worth': 0.66; 'hassle.': 0.84; 'victor': 0.84; 'regret': 0.91; '2013': 0.98
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=p9iDbMNQ3PtD+nWXLinun/OAg8qA+c2UcEFAIRFFyvY=; b=EUCsXLjzDn/HhliICnW6vXZASwsX1xgvtzd2+zxoCloFGgJE+hRw6dVAH3fNVTq5RR 2FF13Qz/MVwFZLozXqs8z5IRZ5j38028GAdM6DAdPlUUZyz250cgv++dGneKXt9RDife SyXHsTbK9wHgp9R91wB+o+wQJbpIS/2Dqr/bZMFsFLgrlB8NDe6Hizc5tDsNlsX38z7s 12On6+sOZjP/yTnfoR/SgJvvo4h00dLyuQAVuxfjKsrJV44Sn1EL3F1UiQF7kXyzXhZ4 p5sxmUFA0pnFYvGmRrvVg2ICsTlklL8INyCIl1oyD+xe2vW4pSv9DfMg5opJpHTe+rP+ 4f8w==
MIME-Version	1.0
X-Received	by 10.66.182.199 with SMTP id eg7mr15134319pac.135.1384298204340; Tue, 12 Nov 2013 15:16:44 -0800 (PST)
In-Reply-To	<CAMpsgwbHW-80oHJ2uCbfs1pGJzB58Nv=w0TmW_34n_=ATD82rg@mail.gmail.com>
References	<CAMpsgwbHW-80oHJ2uCbfs1pGJzB58Nv=w0TmW_34n_=ATD82rg@mail.gmail.com>
Date	Wed, 13 Nov 2013 10:16:44 +1100
Subject	Re: [Python-Dev] The pysandbox project is broken
From	Chris Angelico <rosuav@gmail.com>
To	python-list@python.org
Content-Type	text/plain; charset=ISO-8859-1
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.15
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.2504.1384298207.18130.python-list@python.org> (permalink)
Lines	20
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1384298207 news.xs4all.nl 15965 [2001:888:2000:d::a6]:53621
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:59257

Show key headers only | View raw

On Wed, Nov 13, 2013 at 8:16 AM, Victor Stinner
<victor.stinner@gmail.com> wrote:
> In 2010, a developper called Tav wrote a sandbox called "safelite.py":
> the sandbox hides sensitive attributes to separate a trusted namespace
> and an untrusted namespace.

Ha, I come full circle. This was the exact project that brought me to
this list (for better or for worse!), as we were trying to sandbox
Python code inside C++. Same sort of thing - we wanted free access to
whatever it could do in memory, but no FS or OS access (and limits on
total memory and CPU usage, though they're less critical as I can use
OS APIs to do that). Conclusion: Either utterly impossible, or so hard
as to be not worth the hassle. We switched to JavaScript, though I do
maintain some regret that we couldn't use the better language.

It's probably too late for that project to switch back now (and I've
left the company), but as a matter of intellectual curiosity, I'm
still somewhat interested.

ChrisA

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

Re: [Python-Dev] The pysandbox project is broken Chris Angelico <rosuav@gmail.com> - 2013-11-13 10:16 +1100

csiph-web