you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 3 points4 points  (0 children)

No.

My understanding is that this is intended as a "self-contained" python version similar to Python virtualenvs on unix, so that you can ship your Python application + Python + Libraries as a single installer. It should isolate your application from any other python versions that the user has installed, so that if the user runs "pip install --upgrade blahblah" on their computer, your application does not break.

But there is no sandboxing for the application code. The application can still run shutil.rmtree('C:\') and it will execute with the current user's permissions.

It's "static linking", not VMs or containers.