Python Security Sharing Solution

So, my group is trying to set up a shared server environment for different and different web services. I think we decided to install disable_functionsboth disable_classeson the site in php.iniand php_admin_valuein order to force open_basedirin each application httpd.conf  for php scripts and for passenger switching users for ruby ​​scripts.

We still need to find something for python. Passenger supports python, but not for the security of each application for specific subdirectories (all or nothing at the domain level).

Any suggestions?

(And if any of the previous ones doesn't make sense - well, I'm the guy who needs to set up python support, not the guy who set up php or ruby ​​support, so there are still some “and some kind of magic happens” steps there from my point of view. "

+2
source share
1 answer

Well, there is a system called virtualenv that allows you to run Python in some kind of safe environment and configure / load / disable these environments on the fly. I know little about this, but you must seriously look into it; here is a description from his web page (just google this and you will find):

, , - , . , , 1 LibFoo, 2. ? /usr/lib/python 2.4/site-packages ( ), , , .

, , , ? , .

, , ? , .

virtualenv . , , (, , , ).

+3

Source: https://habr.com/ru/post/1707221/


All Articles