Le samedi 18 septembre 2010 10:39:58, Robert Collins a écrit : > __builtins__ is in everyone's global namespace, so if it can be > mutated, different python programs running in the same sandbox can > affect each other. > > Ditto sys.modules and os environ, but I guess that those are already > addressed.
sys.modules and os.environ are not accessible in pysandbox :-) If you create a rule in the security policy to allow them, you will get read only views. Example with sys.modules: sandbox>>> from sys import modules sandbox>>> modules['sys'] TypeError: Unable to proxy a value of type <type 'module'> sandbox>>> modules['sys']=1 SandboxError: Read only object Builtin module type is blocked because it is unsafe. -- Victor Stinner http://www.haypocalc.com/ _______________________________________________ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com