[Python-Dev] Capabilities / Restricted Execution (original) (raw)

Scott Dial scott+python-dev at scottdial.com
Tue Jul 11 19:30:17 CEST 2006

Phillip J. Eby wrote:

A function's funcclosure contains cell objects that hold the variables. These are readable if you can set the funcclosure of some function of your own. If the overall plan includes the ability to restrict funcclosure setting (or reading) in a restricted interpreter, then you might be okay.

Except this function (getattribute) has been trapped inside of a class which does not expose it as an attribute. So, you shouldn't be able to get to the func_closure attribute of the getattribute function for an instance of the Guard class. I can't come up with a way to defeat this protection, at least. If you have a way, then I'd be interested to hear it.

-- Scott Dial scott at scottdial.com scodial at indiana.edu

More information about the Python-Dev mailing list