Disabling os module might cause a lot of problems. Pipeline and other batch scripts rely on it a lot. We also use a lot of absolute path in our pipeline scripts since we move a lot of files across directories for version control , publishing to the next stage , import directories of the stages , etc ., etc . using relative paths causes a lot of problems here . A cli option to disable all this security thingies would be great boon if at all the security measures are implemented.
On Wed, Jun 5, 2013 at 8:46 PM, Jason van Gumster < [email protected]> wrote: > > Ton Roosendaal <[email protected]> wrote: > > > Hi, > > > > > Things > > > that we need to do are in the file manipulation range, such as moving > or > > > renaming large numbers of files > > > > Well, that you can do outside Blender via regular Python too? > > > > Further - if we can make file manipulations in the UI work sane/safe (and > > usable still), the hacked os module would just do same :) You will also > > define your own blends to be 'trusted' and allow scripts there to write > > anywhere you want (or not). > > > > -Ton- > > This is likely to be problematic. I know I've relied on the os module for a > number of my own internal scripts for pipeline as well as other tasks... > and > not just for file I/O. For example, the subprocess library is likely a huge > security hole, but it's incredibly useful (almost required) for calling > programs that don't have a Python API (or only a python2 API). Sure, a lot > of > these things could be done outside of Blender, but it's far more > convenient to > have it inside... especially for external artists who don't roll their own > Blender. > > In addition to my own esoteric scripts, I'd be curious about how this might > impact Import/Export scripts as well as external renderers. > > -Jason > _______________________________________________ > Bf-committers mailing list > [email protected] > http://lists.blender.org/mailman/listinfo/bf-committers > -- regards - shrinidhi Even god fails to understand a human until his death! http://www.linkedin.com/in/shrinidhi666 https://github.com/shrinidhi666 <http://www.imdb.com/name/nm3025616> _______________________________________________ Bf-committers mailing list [email protected] http://lists.blender.org/mailman/listinfo/bf-committers
