New submission from Nicholas Riley <com-python-b...@sabi.net>:

The OS X installer build script does not ensure that files had the correct 
permissions when being packaged; some files' permissions were affected by your 
umask when running the build script, and others by the permissions of the 
source tree.

This patch sets the umask, so script-created files get correct permissions, 
wraps shutil.copy so it does the same thing, and adapts the existing 
os.walk-based permissions fixer to run over everything else.

It also removes group writability for the Python framework, as this is more 
secure and consistent with how Apple installs Python in 10.7 and later.  If you 
need to install a Python package without being root, either use 
virtualenv/pythonv, ~/Library or ~/.local.  Ned Deily and I discussed this at 
the PyCon sprints and he will update the documentation to match.

----------
assignee: ronaldoussoren
components: Macintosh
files: perm.patch
keywords: patch
messages: 155716
nosy: nriley, ronaldoussoren
priority: normal
severity: normal
status: open
title: OS X installer build script: permissions not ensured
type: behavior
versions: Python 3.3
Added file: http://bugs.python.org/file24837/perm.patch

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue14299>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to