现在rexec已经不见了...... [英] Now that rexec is gone...

问题描述

既然rexec已经不存在了，那么在受限制的环境中执行Python的

上是否有任何代码或信息？在我推出自己的

解决方案之前，确切地说rexec中的安全漏洞究竟在哪里？


（我知道获得限制环境的一种方法：屠夫Python

解释器通过删除所有甚至远程危险的解释器，使用

Python仅用于限制执行，并在C ++中执行其他所有操作

嵌入了Python解释器的程序。出于显而易见的原因，我想避免这样做。$

-

Rainer Deyke - ra*****@eldwood.com - http://eldwood.com

解决方案

" Rainer Deyke" < RA ***** @ eldwood.com>在消息中写道

news：XA8db.597231

o %2.276974@sccrnsc02 ...

现在rexec已经不见了，在受限制的环境中执行Python时，是否有任何代码或信息可用
？在我推出我自己的
自己的解决方案之前，究竟rexec中的安全漏洞到底在哪里？

建议你google去年使用clpy来获取''rexec' 。还可以查看去年秋天的
py-dev摘要，讨论为什么要删除。


TJR

< blockquote>Rainer Deyke < RA ***** @ eldwood.com>写道：

现在rexec已经不见了，在受限制的环境中执行Python是否有任何可用的代码或信息？


python-dev上有一个关于Zope'版本的rexec

（RestrictedPython？）的帖子，在随意检查中看起来很有希望。


干杯，

mwh


- 如果你在椅子上旋转，它可能引起我的注意，
用舌头说话，用绿色小妖精的喷气机喷射。

我可以安排这个。 ;-) - Barry Warsaw& Fred Drake

Now that rexec is gone, is there any code or information available on
executing Python in a restricted environment? And before I roll my own
solution, exactly where the security holes in rexec anyway?

(I know one way of getting a restricted environment: butcher the Python
interpreter by removing everything that''s even remotely dangerous, use
Python only for restricted execution, and do everything else in a C++
program that embeds the butchered Python interpreter. I''d like to avoid
doing that, for obvious reasons.)
--
Rainer Deyke - ra*****@eldwood.com - http://eldwood.com

解决方案

"Rainer Deyke" <ra*****@eldwood.com> wrote in message
news:XA8db.597231

o%2.276974@sccrnsc02...

Now that rexec is gone, is there any code or information available on executing Python in a restricted environment? And before I roll my own solution, exactly where the security holes in rexec anyway?

Suggest you google last year of c.l.py for ''rexec''. Also check out
py-dev summaries of last fall for discussion of why removed.

TJR

"Rainer Deyke" <ra*****@eldwood.com> writes:

Now that rexec is gone, is there any code or information available on
executing Python in a restricted environment?
There was a thread on python-dev about Zope''s version of rexec
(RestrictedPython?) which looked promising on casual inspection.

Cheers,
mwh

-- It might get my attention if you''d spin around in your chair,
spoke in tongues, and puked jets of green goblin goo.

I can arrange for this. ;-) -- Barry Warsaw & Fred Drake

这篇关于现在rexec已经不见了......的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！