 |
|
|
Restricted Execution HOWTO | |
|
|
|
|
Restricted Execution HOWTO | |
|
A.M. Kuchling
amk@amk.ca
Python 2.2.2 and earlier provided a rexec module running untrusted code. However, it's never been exhaustively audited for security and it hasn't been updated to take into account recent changes to Python such as new-style classes. Therefore, the rexec module should not be trusted. To discourage use of rexec, this HOWTO has been withdrawn.
The rexec and Bastion modules have been disabled in the Python CVS tree, both on the trunk (which will eventually become Python 2.3alpha2 and later 2.3final) and on the release22-maint branch (which will become Python 2.2.3, if someone ever volunteers to issue 2.2.3).
For discussion of the problems with rexec, see the python-dev threads starting at the following URLs: http://mail.python.org/pipermail/python-dev/2002-December/031160.html, and http://mail.python.org/pipermail/python-dev/2003-January/031848.html.
Sep. 12, 1998: Minor revisions and added the reference to the Janus project.
Feb. 26, 1998: First version. Suggestions are welcome.
Mar. 16, 1998: Made some revisions suggested by Jeff Rush. Some minor changes and clarifications, and a sizable section on exceptions added.
Oct. 4, 2000: Checked with Python 2.0. Minor rewrites and fixes made. Version number increased to 2.0.
Dec. 17, 2002: Withdrawn.
Jan. 8, 2003: Mention that rexec will be disabled in Python 2.3, and added links to relevant python-dev threads.
This document was generated using the LaTeX2HTML translator.
LaTeX2HTML is Copyright © 1993, 1994, 1995, 1996, 1997, Nikos Drakos, Computer Based Learning Unit, University of Leeds, and Copyright © 1997, 1998, Ross Moore, Mathematics Department, Macquarie University, Sydney.
The application of LaTeX2HTML to the Python documentation has been heavily tailored by Fred L. Drake, Jr. Original navigation icons were contributed by Christopher Petrilli.
|
|
|
Restricted Execution HOWTO | |
|