[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Wes Turner
On Mon, Feb 27, 2023, 8:12 AM Wes Turner wrote: > > > On Sun, Feb 26, 2023, 5:42 PM Chris Angelico wrote: > >> On Mon, 27 Feb 2023 at 08:33, python--- via Python-ideas >> wrote: >> > >> > Thank you for the insight. I have some more work to do! I will share on >> this thread again when I've made

[Python-ideas] Re: Proposal: -X importcache to supplement -X importtime for loaded modules

2023-02-27 Thread James Addison via Python-ideas
On Wed, 15 Feb 2023 at 02:06, Inada Naoki wrote: > > `-X importtime=2` > > This is expert-only tool. So no need for verbose name. +1 that re-using existing parameter names is both concise and also convenient. However: do we have an opportunity to make the parameter _value_ both concise and also

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread python--- via Python-ideas
Makes sense, will do so. ___ Python-ideas mailing list -- python-ideas@python.org To unsubscribe send an email to python-ideas-le...@python.org https://mail.python.org/mailman3/lists/python-ideas.python.org/ Message archived at https://mail.python.org/ar

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread python--- via Python-ideas
I really appreciate the pointers, thank you. I will look into them. ___ Python-ideas mailing list -- python-ideas@python.org To unsubscribe send an email to python-ideas-le...@python.org https://mail.python.org/mailman3/lists/python-ideas.python.org/ Mess

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread python--- via Python-ideas
Thank you for your insight. >I hope you are at least aware that over the years various multi-year attempts >to create Python sandboxes ultimately failed to the point of being altogether >abandoned. Yes I am, I have looked at pysandbox and RestrictedPython and I believe my approach, albeit very

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Joao S. O. Bueno
I hope you are at least aware that over the years various multi-year attempts to create Python sandboxes ultimately failed to the point of being altogether abandoned. Python and Javascript differ fundamentally that Python runtime is intrinsically bound to I/O, like filesystem access - which is a t

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Wes Turner
On Sun, Feb 26, 2023, 5:42 PM Chris Angelico wrote: > On Mon, 27 Feb 2023 at 08:33, python--- via Python-ideas > wrote: > > > > Thank you for the insight. I have some more work to do! I will share on > this thread again when I've made further changes. > > > > If you have some time, I would be gr

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Paul Moore
On Mon, 27 Feb 2023 at 20:58, python--- via Python-ideas > > > The base is not the master branch but the 3.11.0 release. Maybe you should rebase it on main? That will need to happen if it's to be usable, anyway, and it makes it far easier to review/discuss if you follow the normal process for (pr

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Chris Angelico
On Mon, 27 Feb 2023 at 02:32, python--- via Python-ideas wrote: > Supply chain attacks are becoming a pressing concern in software development > due to the large number of dependencies and multiple attack vectors. Using > third party modules (libraries, packages etc) is always a risk but the tr

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread Chris Angelico
On Mon, 27 Feb 2023 at 20:58, python--- via Python-ideas wrote: > > Have you looked at the diff? It's not "1000+" commits as you claim. It's 17 > commits with most being README changes. The base is not the master branch but > the 3.11.0 release. > > https://github.com/python/cpython/compare/3.11

[Python-ideas] Re: Restricting access to sensitive APIs with a permission model like Deno

2023-02-27 Thread python--- via Python-ideas
Have you looked at the diff? It's not "1000+" commits as you claim. It's 17 commits with most being README changes. The base is not the master branch but the 3.11.0 release. https://github.com/python/cpython/compare/3.11...R9295:cpython:policy I do not see why you cannot audit and run this (or