-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Short term Python: Restrict Python to only execute OSTree provided files #152
Comments
Discussed in the meeting this past wednesday:
|
There are 2 PEPs which would allow that: |
i.e. by using the proposed |
From a quick read through the PEPs I'm not sure that @vstinner is there some other mechanism in the |
Your use case can be implemented with PEP 578 and three custom hooks:
I'll work on a PoC. |
CC @zooba |
There are a couple of (Windows-specific) PoCs already at https://github.com/zooba/spython/ - happy to have more :)
|
Also worth calling out it looks like we'll be able to ship without python at all (just pending the |
Closing as we're now no longer shipping python! Feel free to reopen later if needed. |
Colin had an interesting suggestion in #32 (comment). His suggestion is that we can restrict python execution of random user scripts by:
/usr/
This allows us to achieve our
#1 goal
that we identified while we continue to work on the process of burning down our other python dependencies.The text was updated successfully, but these errors were encountered: