Re: If venv is a reality can I build a program python wit it for more security ?

[Gordon Messmer]

On 2/24/22 02:33, Dorian ROSSE wrote:
> If venv is a reality can I build a program python wit it for more 
> security ?

No, venv won't give you any additional security if a python module has 
malicious code.

If you don't fully trust a python module but you want to run it anyway, 
consider building a container image.  You can install the required 
python modules in the image, and then run them the container mostly 
isolated from the rest of your system.  If it needs data files (and I 
expect that it does), then you can mount a single directory as a volume 
in the container so that the python modules have access to those files 
but nothing else on your system.

Or, if you don't trust the isolation of containers, then use a virtual 
machine.

If venv is a reality can I build a program python wit it for more security ?

[Dorian ROSSE]

Thanks you Gordon for your learning,

I hope in some month buy a VMware license I have an Intel i9 10 core and 20 thread,

Have a nice day,

Regards.

Dorian Rosse.
________________________________
From: Gordon Messmer 
Sent: Thursday, February 24, 2022 7:35:15 PM
To: [e-mail] 
Subject: Re: If venv is a reality can I build a program python wit it for more security ?

On 2/24/22 02:33, Dorian ROSSE wrote:
> If venv is a reality can I build a program python wit it for more
> security ?

No, venv won't give you any additional security if a python module has
malicious code.

If you don't fully trust a python module but you want to run it anyway,
consider building a container image.  You can install the required
python modules in the image, and then run them the container mostly
isolated from the rest of your system.  If it needs data files (and I
expect that it does), then you can mount a single directory as a volume
in the container so that the python modules have access to those files
but nothing else on your system.

Or, if you don't trust the isolation of containers, then use a virtual
machine.
_______________________________________________
users mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure