Re: Dependency on python-oauth2

2014-02-10 Thread Barry Warsaw
On Feb 10, 2014, at 10:33 AM, Iain R. Learmonth wrote: >Cool. Thanks everyone for your help. I'm going to ask upstream if >they'll consider moving to oauthlib then instead of python-oauth2. Thanks for that. I've ported a number of libraries and apps to oauthlib, and had a chance to speak with th

Re: Help with packaging of python executable and its modules

2014-02-10 Thread Andreas Tille
Hi Piotr, On Mon, Feb 10, 2014 at 12:53:50PM +0100, Piotr Ożarowski wrote: > > good that you ask, I will use this opportunity to dispel a myth: > dh_python* tools (or any other dh_* tool which doesn't have "install" in > its name AFAIK) do not install files. > > dh_python* is not supposed to ins

Re: Help with packaging of python executable and its modules

2014-02-10 Thread Piotr Ożarowski
[Olivier Berger, 2014-02-09] > Piotr Ożarowski writes: > > > [Andreas Tille, 2014-02-07] > >> On Fri, Feb 07, 2014 at 02:41:10PM +0100, Julian Taylor wrote: > >> > I assume this is a python application and not a library? > >> > >> It is an application including some private modules which I like

Re: Dependency on python-oauth2

2014-02-10 Thread Iain R. Learmonth
On 10/02/14 05:57, Thomas Goirand wrote: > On 02/10/2014 02:41 AM, Iain R. Learmonth wrote: > [...] > > python-oauth2 is indeed not maintained anymore upstream, and has > security problems. As a consequence, I worked out a patch for keystone > so that it uses oauthlib instead. I would recommend th

Re: Python CGI sandboxing advice (packaging of Online Python Tutor)

2014-02-10 Thread Olivier Berger
Hi. I'm looking for advice on how to package the Online Python Tutor's backend server which can execute arbitrary Python scripts submitted by the user. The CGI's code is supposed to be safeguarding against abuse, but I think some sandboxing would be better at the CGI invocation for additional sec