Repository navigation
Missing audit events for python -i and python -m asyncio #121957
Description
Modules/main.c:pymain_repl should fire cpython.run_stdin like Modules/main.c:pymain_run_stdin to allow administrators to log/block interactive use. Maybe that event firing should be moved all the way to _PyRun_InteractiveLoopObject, but its only other use is with PyRun_InteractiveLoopFlags, which is embedded, so not clear we want that. Therefore, pymain_repl is now the clear choice. Affected versions: Python 3.8+.
Similarly, the asyncio REPL didn't emit any audit events related to interactive use. Affected versions: Python 3.8+.
Note that code.InteractiveConsole also doesn't fire interactive use audit events, but my thinking here is that this is an end-user API, so the user can choose to fire that event if they want to. Similar case to PyRun_InteractiveLoopFlags.
This will require a separate fix for 3.8 - 3.12.
Linked PRs
- gh-121957: Emit audit events for
python -iandpython -m asyncio#121958 - [3.13] gh-121957: Emit audit events for
python -iandpython -m asyncio(GH-121958) #122115 - [3.12] gh-121957: Emit audit events for python -i and python -m asyncio #122117
- [3.11] gh-121957: Emit audit events for python -i and python -m asyncio #122118
- [3.10] gh-121957: Emit audit events for python -i and python -m asyncio #122119
- [3.9] gh-121957: Emit audit events for python -i and python -m asyncio #122120
- [3.8] gh-121957: Emit audit events for python -i and python -m asyncio #122121
Activity
pythongh-121957: Emit `cpython.run_stdin` audit event for `python -i`…
[-]Missing audit event for `Modules/main.c:pymain_start_pyrepl_no_main`[/-][+]Missing audit events for `python -i` and `python -m asyncio`[/+]8 remaining items
pythongh-121957: Emit audit events for python -i and python -m asyncio
pythongh-121957: Emit audit events for python -i and python -m asyncio
pythongh-121957: Emit audit events for python -i and python -m asyncio
[3.13] gh-121957: Emit audit events for `python -i` and `python -m as…
[3.12] gh-121957: Emit audit events for python -i and python -m async…
[3.11] gh-121957: Emit audit events for python -i and python -m async…
[3.10] gh-121957: Emit audit events for python -i and python -m async…
[3.9] gh-121957: Emit audit events for python -i and python -m asyncio (
ambv commentedon Jul 22, 2024
The fix and backports landed, but I'm keeping this open, because I'd like to have a test of those audit events at least on
main. It's going to be somewhat tricky since we'll have to build an audit binary for that.[3.8] gh-121957: Emit audit events for python -i and python -m asyncio (
package/python3: security bump to version 3.12.5
StanFromIreland commentedon Nov 5, 2025
Triage: Was the test completed, can this be closed?