Extending subinterpreters with sandboxing capabilities

[mwr]

@vstinner

Did you read my long email describing the history of pysandbox? Which part should I elaborate?

I was asked about him and I wrote my opinion

Built-in security subsystem

But it was since then that the event audit system appeared. As for Victor’s arguments, could you put them together in a structured list like mine so that we can discuss them on the merits? I have identified the following for myself: It seemed to me that this was the main reasoned remark there. But it’s strange to hear about such a problem, if in the future it’s possible to create readonly modules then it’s solved simply globals()[__builtins __] = ModuleProxy(__builtins __) Or let other w…

@vstinner

Go ahead, write your own sandbox and ask other people to break it to test its security.

I’m just trying not to do anything in vain
Therefore, I really want to understand the fundamentally impossible moments from someone else’s experience.