The following interaction fails:
> (require racket/sandbox)
> (define sb-eval
(make-evaluator 'racket/base
#:allow-for-require '(math)))
> (sb-eval '(require math))
current-directory: `exists' access denied for /tmp/ryan/
context...:
/Applications/Racket v6.1.1/collects/setup/dirs.rkt:291:2: dll-dir
/Applications/Racket v6.1.1/collects/racket/promise.rkt:70:15
/Applications/Racket v6.1.1/collects/racket/private/more-scheme.rkt:264:2:
call-with-exception-handler
/Applications/Racket v6.1.1/collects/racket/promise.rkt:38:2
/Applications/Racket v6.1.1/collects/setup/dirs.rkt:167:7:
get-lib-search-dirs
/Applications/Racket v6.1.1/collects/racket/private/so-search.rkt:28:0:
so-find
/Applications/Racket v6.1.1/collects/racket/runtime-path.rkt:83:9
/Applications/Racket v6.1.1/collects/racket/runtime-path.rkt:81:0:
resolve-paths
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/bigfloat/gmp.rkt: [running body]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/bigfloat/mpfr.rkt: [traversing imports]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/bigfloat/bigfloat-mpfr.rkt: [traversing
imports]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/bigfloat/bigfloat-struct.rkt:
[traversing imports]
/Applications/Racket v6.1.1/share/pkgs/math-lib/math/bigfloat.rkt:
[traversing imports]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/polynomial/chebyshev.rkt: [traversing
imports]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/functions/stirling-error.rkt:
[traversing imports]
/Applications/Racket
v6.1.1/share/pkgs/math-lib/math/private/flonum/flonum-factorial.rkt:
[traversing imports]…
The problem seems to be that the math library wants to load a foreign library
(mpfr), but the sandbox security guard is getting in its way. In other words,
the allow-for-require blessing does not extend to the FFI.
Question 1: Is there an easy workaround for this particular issue? (Other than
broadly relaxing the security guard?)
Question 2: Is there anything the math library (and other libraries that use
ffi bindings) could do to make this automatically work?
Ryan
--
You received this message because you are subscribed to the Google Groups
"Racket Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/racket-dev/A9264300-7591-46A6-9C18-237CE8F83AEA%40ccs.neu.edu.
For more options, visit https://groups.google.com/d/optout.
