Secret Recipes of the Python Ninja

How to do it...

The core part of this PEP is the introduction of two APIs that enable sysadmins to integrate Python into their security setup. The key factor is that these APIs don't impose certain restrictions on how the systems should be configured, or their behavior:

1. The audit hook API allows operations to generate messages and pass them up the stack to the operator. These operations are normally buried within the Python runtime or standard library, preventing normal access to them, such as module imports, DNS resolution, or dynamic code compilation.

The following code shows how the PEP defines the API in the C code underlying Python. The new Python APIs for audit hooks are shown in audit_hook_api.py:

 # Add an auditing hook sys.addaudithook(hook: ...