python-manhole
Manhole is a python daemon thread that will accept unix domain socket connections and present the stacktraces for all threads and an interactive prompt.
Access to the socket is restricted to the application’s effective user id or root.
Usage:
import manhole manhole.install() # this will start the daemon thread
Now in a shell you can do either of these:
netcat -U /tmp/manhole-1234 socat - unix-connect:/tmp/manhole-1234 socat readline unix-connect:/tmp/manhole-1234
Sample output:
$ nc -U /tmp/manhole-1234 Python 2.7.3 (default, Apr 10 2013, 06:20:15) [GCC 4.6.3] on linux2 Type "help", "copyright", "credits" or "license" for more information. (InteractiveConsole) >>> dir() ['__builtins__', 'dump_stacktraces', 'os', 'socket', 'sys', 'traceback'] >>> print 'foobar' foobar
Features
Uses unix domain sockets, only root or same effective user can connect.
Current implementation runs a daemon thread that waits for connection.
Lightweight: does not fiddle with your process’s singal handlers, settings, file descriptors, etc
Compatible with apps that fork, reinstalls the Manhole thread after fork - had to monkeypatch os.fork/os.forkpty for this.
What happens when you actually connect to the socket
Credentials are checked (if it’s same user or root)
sys.__std*__/sys.std* are be redirected to the UDS
Stacktraces for each thread are written to the UDS
REPL is started so you can fiddle with the process
Whishlist
Be compatible with eventlet/stackless (provide alternative implementation without thread)
More configurable (chose what sys.__std*__/sys.std* to patch on connect time)
Requirements
Not sure yet … maybe Python 2.6 and 2.7. Check Travis:
Metadata
Release files for manhole 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| manhole-0.1.2.tar.gz | 8.3 kB | Without provenance | Details |
Release files / manhole-0.1.2.tar.gz
| Download URL | manhole-0.1.2.tar.gz |
|---|---|
| Size | 8.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b3e21e4046b89f4bbf10e962f125a678a8824d8553784d3f9a5e12dad3e5a244
|
|
BLAKE2b-256 checksum How to use checksums |
94c9d981b13d20a58ce6a71df2f24412d4dd3ff761c50cb94df4159744254a29
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for manhole 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.