Sabotage rexec.py and Bastion.py. These are not secure in Python 2.2

or 2.3.

diff --git a/Lib/Bastion.py b/Lib/Bastion.py
index 99990a2d7df662987e78597948b520778e628ff7..ae2db74ca3a604854e54394a6b61b6f841f91ccf 100644 (file)
--- a/Lib/Bastion.py
+++ b/Lib/Bastion.py
@@ -97,6 +97,8 @@ def Bastion(object, filter = lambda name: name[:1] != '_',
 
     """
 
+    raise RuntimeError, "This code is not secure in Python 2.2 and 2.3"
+
     # Note: we define *two* ad-hoc functions here, get1 and get2.
     # Both are intended to be called in the same way: get(name).
     # It is clear that the real work (getting the attribute

diff --git a/Lib/rexec.py b/Lib/rexec.py
index 52e0c32aa11617e34b35cd4c4bf50466bb959979..ef85ac6806a4dacaac090f13109982fc88e733e0 100644 (file)
--- a/Lib/rexec.py
+++ b/Lib/rexec.py
@@ -179,6 +179,9 @@ class RExec(ihooks._Verbose):
         sent to standard output.
 
         """
+
+        raise RuntimeError, "This code is not secure in Python 2.2 and 2.3"
+
         ihooks._Verbose.__init__(self, verbose)
         # XXX There's a circular reference here:
         self.hooks = hooks or RHooks(verbose)