| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | Andrew Dunstan <andrew(at)dunslane(dot)net> |
| Cc: | David Blewett <david(at)dawninglight(dot)net>, Alvaro Herrera <alvherre(at)commandprompt(dot)com>, Bruce Momjian <bruce(at)momjian(dot)us>, Peter Eisentraut <peter_e(at)gmx(dot)net>, pgsql-hackers(at)postgresql(dot)org, James Pye <lists(at)jwp(dot)name>, Marko Kreen <markokr(at)gmail(dot)com> |
| Subject: | Re: Python 3.0 does not work with PL/Python |
| Date: | 2009-05-29 15:38:16 |
| Message-ID: | 18344.1243611496@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Andrew Dunstan <andrew(at)dunslane(dot)net> writes:
> David Blewett wrote:
>> I brought this up last August [1]. Zope has a working sandbox that
>> they include in their distribution.
>> http://archives.postgresql.org/message-id/9d1f8d830808041008v50104fd8p6181d5ddce85a6a@mail.gmail.com
> How many python installations have this gadget? If the answer is "not
> many" then it's not much good to us, unless someone wants to create
> PL/zope-sandbox. Really, something like this should be part of a
> standard python installation.
Yeah. For one thing, how much trust can you put in a security mechanism
that hasn't been accepted upstream? Given the history of this sort of
thing in Python, I'm not prepared to just assume that Zope got it right.
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Zdenek Kotala | 2009-05-29 15:39:18 | Re: pg_migrator and an 8.3-compatible tsvector data type |
| Previous Message | Andrew Dunstan | 2009-05-29 15:37:59 | Re: plperl error format vs plpgsql error format vs pgTAP |