From: arcege at shore.net (Michael P. Reilly)
Date: Mon, 05 Apr 1999 21:59:39 GMT
Subject: Secure Python for embedding
References: <7ebb3c$8jf$1@news.inet.tele.dk>
Message-ID: <fnaO2.1171$eJ.197841@news.shore.net>
X-UID: 894                                                  

Per Knudsgaard <perk at int.tele.dk> wrote:
:    Hi all,

:    I have a situation where I would like to add a scripting language to the
: client of a client-server application.  The server will, as part of the
: communication between client and server, provide the client with scripts to
: run.  I would like it to be secure so I do not end in a situation where I
: expose the client machine to virae, Trojan horses or similar nasty things.
: In other words, I would like the scripts to be run in their own little
: "sandbox" environment.  I have the embedding almost down, but what I have is
: a fully functional language within the client.  Is there any way, without
: modifying the core Python code, that I can implement a secure scripting
: language using Python?

You will probably want to look at the rexec standard module.  Reading the
code can help you a lot.

  -Arcege





