[GR-12243] Do not set sys.executable if neither host nor native access are allowed

Author: timfel

graalpython/com.oracle.graal.python/src/com/oracle/graal/python/builtins/modules/SysModuleBuiltins.java

@@ -104,7 +104,7 @@ public void initialize(PythonCore core) {
         builtinConstants.put("byteorder", ByteOrder.nativeOrder() == ByteOrder.LITTLE_ENDIAN ? "little" : "big");
         builtinConstants.put("copyright", LICENSE);
         builtinConstants.put("dont_write_bytecode", true);
-        if (TruffleOptions.AOT) {
+        if (TruffleOptions.AOT || !core.getContext().isExecutableAccessAllowed()) {
             // cannot set the path at this time since the binary is not yet known; will be patched
             // in the context
             builtinConstants.put("executable", PNone.NONE);

graalpython/com.oracle.graal.python/src/com/oracle/graal/python/runtime/PythonContext.java

@@ -192,7 +192,7 @@ public void patch(Env newEnv) {
 
     private void setupRuntimeInformation() {
         PythonModule sysModule = core.initializeSysModule();
-        if (TruffleOptions.AOT && !language.isNativeBuildTime()) {
+        if (TruffleOptions.AOT && !language.isNativeBuildTime() && isExecutableAccessAllowed()) {
             sysModule.setAttribute("executable", ProcessProperties.getExecutableName());
         }
         sysModules = (PDict) sysModule.getAttribute("modules");
@@ -260,4 +260,8 @@ public void initializeMainModule(String path) {
     public static Assumption getSingleNativeContextAssumption() {
         return singleNativeContext;
     }
+
+    public boolean isExecutableAccessAllowed() {
+        return getEnv().isHostLookupAllowed() || getEnv().isNativeAccessAllowed();
+    }
 }