Re: minimum install & pickling

2008-09-18 Thread Aaron "Castironpi" Brady
On Sep 18, 5:20 am, Paul Boddie <[EMAIL PROTECTED]> wrote: > On 17 Sep, 22:18, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]> > wrote: > > > On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote: > > > >http://wiki.python.org/moin/How_can_I_run_an_untrusted_Python_script_...) > > > These solu

Re: minimum install & pickling

2008-09-18 Thread Paul Boddie
On 17 Sep, 22:18, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]> wrote: > On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote: > > >http://wiki.python.org/moin/How_can_I_run_an_untrusted_Python_script_...) > > These solutions have at least the same bugs that the bare bones > solution in the

Re: minimum install & pickling

2008-09-17 Thread Aaron "Castironpi" Brady
On Sep 17, 6:06 pm, greg <[EMAIL PROTECTED]> wrote: > Aaron "Castironpi" Brady wrote: > > Even a function created from raw bytecode string can't do anything > > without __import__ or 'open'. > > Not true: > >    for cls in (1).__class__.__bases__[0].__subclasses__(): >      if cls.__name__ == "file

Re: minimum install & pickling

2008-09-17 Thread greg
Aaron "Castironpi" Brady wrote: Even a function created from raw bytecode string can't do anything without __import__ or 'open'. Not true: for cls in (1).__class__.__bases__[0].__subclasses__(): if cls.__name__ == "file": F = cls F(my_naughty_path, "w").write(my_naughty_data)

Re: minimum install & pickling

2008-09-17 Thread Aaron "Castironpi" Brady
On Sep 17, 4:43 am, Paul Boddie <[EMAIL PROTECTED]> wrote: > On 17 Sep, 07:26, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]> > wrote: > > > Sometimes questions come up on here about unpickling safely and > > executing foreign code.  I was thinking a minimum install that didn't > > even have acce

Re: minimum install & pickling

2008-09-17 Thread Paul Boddie
On 17 Sep, 07:26, "Aaron \"Castironpi\" Brady" <[EMAIL PROTECTED]> wrote: > Sometimes questions come up on here about unpickling safely and > executing foreign code.  I was thinking a minimum install that didn't > even have access to modules like 'os' could be safe.   (Potentially.) > I have time t

minimum install & pickling

2008-09-16 Thread Aaron "Castironpi" Brady
Sometimes questions come up on here about unpickling safely and executing foreign code. I was thinking a minimum install that didn't even have access to modules like 'os' could be safe. (Potentially.) I have time to entertain this a little, though all the devs are busy. I can bring it up again i