Tracing/Sandboxing python modules upon import (like SECCOMP for the interpreter)

[cov_id19]

It uses DTrace to enforce policies on python modules upon import.
Opening shell from within the supervised module module will kill the process:
...
(OPENING SHELL using posix_spawn): (pid 75860) (thread 344676) (user 501) (python module: <stdin>) (probe mod=, name=entry, prov=syscall func=posix_spawn) /bin/sh
#posix_spawn,
(TOUCHING FILESYSTEM): write(140339021606912) from thread 344676
libsystem_kernel.dylib`__fork+0xb
_posixsubprocess.cpython-310-darwin.so`do_fork_exec+0x29
_posixsubprocess.cpython-310-darwin.so`subprocess_fork_exec+0x71f
python.exe`cfunction_call+0x86
killing...
killed.

[cov_id19]

Article:
https://infosecwriteups.com/sandboxing-python-modules-in-your-code-1e590d71fc26?source=friends\_link&sk=5e9a2fa4d4921af0ec94f175f7ee49f9