[Bf-committers] Python sandbox

[Tom M]

Ton,

on a farm blender would only have access to the folder that the admin has setup.

Any computer that has python installed has the exact same security risks.

These days, pretty much every computer has python preinstalled,
especially one used for animation.

Every animation tool has the same issue as far as i'm aware

http://securitytracker.com/alerts/2009/Nov/1023228.html

LetterRip

On Wed, Mar 17, 2010 at 8:45 AM, Ton Roosendaal <ton at blender.org> wrote:
> Hi,
>
> I am not talking about "make everything in Python run sandboxed". The
> target can be narrowed down to  a simpler task:
>
> 1) support animation scripts (drivers, constraints, fcurve mods)
> 2) interface scripts
> 3) basic import and export
>
> If '3' or even '2' is not possible, we then can try '1' even, it might
> be useful for a total-safe blender to be used on farms, or for bug
> checks, etc. We should be aware that nearly every user won't ever code
> Python tools anyway.
>
> I also dare to challange python.org to look into this topic again. If
> we cannot provide a decent quality and reasonable safe Blender with
> Python, we better ditch it and switch to Lua or so.
>
> -Ton-
>
> ------------------------------------------------------------------------
> Ton Roosendaal  Blender Foundation   ton at blender.org    www.blender.org
> Blender Institute   Entrepotdok 57A  1018AD Amsterdam   The Netherlands
>
> On 17 Mar, 2010, at 13:38, Martin Poirier wrote:
>
>>
>>
>> --- On Wed, 3/17/10, Campbell Barton <ideasman42 at gmail.com> wrote:
>>
>>> I'm not interested in this for a few reasons...
>>>
>>> * Its a lot of work, even python guys have trouble to do
>>> this well and
>>> there are way more python developers then blenders.
>>
>> For this exact reason, I think it's totally outside the scope of GSOC.
>>
>> Better people have tried and failed before.
>>
>> Martin
>>
>>
>>
>> __________________________________________________________________
>> Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark
>> your favourite sites. Download it now
>> http://ca.toolbar.yahoo.com.
>> _______________________________________________
>> Bf-committers mailing list
>> Bf-committers at blender.org
>> http://lists.blender.org/mailman/listinfo/bf-committers
>
> _______________________________________________
> Bf-committers mailing list
> Bf-committers at blender.org
> http://lists.blender.org/mailman/listinfo/bf-committers
>