Preventing imports in Python

Question

I have python embedded in an application as a scripting platform so the users can write python scripts. I am trying to prevent imports so they cannot cause damage in anyway and have to stick to the provided API.

I have come up with the following Python code:

__builtins__ .__import__= None 
reload = None

This seems to prevent imports and prevents reloading of modules. The prevention of reloading is required so they can't reload builtins giving them back a working import.

However I am not a Python expert. Is there anything else I am missing that the user can still do to import modules?

Thanks

Answer 1

What you probably want is to run Python in a sandbox. There are a number of ways of doing this, for example PyPy has sandboxing support.

You could also try sandboxing the Python process itself using external tools, but I suppose this is dependent on the operating system.