tags:

views:

141

answers:

3
+5  Q: 

Safest python code running

How can I protect my web server, if I run custom users code on server. If any user can submit his python source on my server and run it.

Maybe some modules or linux tools for close any network and hardware activity for this script.

Thank's all for help!

+8  A: 

The concept you're thinking of is sandboxing. Check out the Python wiki page about it:

http://wiki.python.org/moin/SandboxedPython

Amber  2010-04-11 22:01:39
A: 

In general, python is not the best language choice if you want to allow the execution of untrusted code. The JVM and .NET have much better support for sandboxing, so Jython and IronPython would be better choices.

mikerobi  2010-04-12 00:24:41
Actually -- the safest approach would arguably be to use `seccomp`, which locks down the available system calls to `exit()`, `read()` and `write()` (the latter to already-open file descriptors); this would allow even arbitrary chunks of native binary to be run. However, as Python needs more syscalls than these to operate, it is incompatible with seccomp. I trust seccomp much more than any language- or interpreter-level sandbox, simply because it's simpler, less flexible, and more restrictive.
Charles Duffy  2010-04-12 00:50:23
A: 

Check out Utility Mill, to see how Greg Pinero managed this.

Paul McGuire  2010-04-12 03:07:27

related questions

Programmatically talking to a Serial Port in OS X or Linux
Best ways to teach a beginner to program?
Calling a Function From a String With the Function's Name in Python
An executable Python app
Text Editor For Linux (Besides Vi)?
What Hosting Service is best for Django applications?
File size differences after copying a file to a server vía FTP
Python: what is the difference between (1,2,3) and [1,2,3], and when should I use each?
Python: What OS am I running on?
How do I make a menu in python that does not require the user to press (enter) to make a selection?
How do you express binary literals in Python?
What is the most efficient graph data structure in Python?
Adding a Method to an Existing Object
How to learn Python: Good Example Code?
How do I use Python's itertools.groupby()?
Python and MySQL
Class views in Django
Is there an IDE that provides code completion for Python
Using 'in' to match an attribute of Python objects in an array
cx_Oracle - what is the best way to iterate over a result set?
cx_Oracle - How do I access Oracle from Python?
Continuous Integration System for a Python Codebase
Get a preview jpeg of a pdf on windows?
How can I find the full path to a font from its display name on a Mac?
XML Processing in Python