Python remove OS module

[Theldron]

Hi all,

 

Python was installed on the network, but students are messing with the OS module. How do I go about removing so it cannot be used?

 

Also students are using python to call CMD and powershell, even though they are disabled normally. How would I go about disabling that ability?

 

Thanks

[mavhc]

Either you use SRP/Applocker to block them, or you stop caring and fix any security holes. Not like being able to run CMD gives you special powers you didn't have already.

 

The library files are in the the Python\Lib folder, could just remove os.py, but that will probably prevent them from doing their programming course.

 

Problem 1: there's a security hole, and someone might find it. Solution 1: fix security hole. Because otherwise a hacker is going to find it anyway. No school has 0 pupil accounts without a guessable password.

Solution 1a: it's against the law to hack computers, point this out, there's 100 examples of people going to jail for messing about because ooh, scary computers.

 

Problem 2: Automation means pupils can eg create 100000 files. Solution 2: ban the from using computers for a while if they do. Solution 2a: quotas

[Warwick_Tech]

Just my two cents, we tried to do the same but ended up dropping Python as an install completely and using cloud versions instead -

 

I remember we had a heated argument both here and at BETT where we all threw our hats in the ring "Students can do this anyway, it's not a hole" "Closing the stable door after the horse has bolted" etc.etc.

 

It just all got a bit heated.

 

From my experimentation remvoing the os.py breaks python, there is no way to seperate the aspects of the program, so I put my foot down and had it removed.

 

For reference, our cloud apps is https://edube.org/sandbox you can even save and load .py files here.

[mavhc]

Windows 10 has a built in sandbox https://techcommunity.microsoft.com/t5/windows-kernel-internals/windows-sandbox/ba-p/301849 might be of use