#15387: Problem with path security check inside /tmp on OS X
---------------------------+-------------------------
Reporter: nbruin | Owner:
Type: defect | Status: new
Priority: major | Milestone: sage-5.13
Component: porting | Resolution:
Keywords: | Merged in:
Authors: | Reviewers:
Report Upstream: N/A | Work issues:
Branch: | Commit:
Dependencies: | Stopgaps:
---------------------------+-------------------------
Changes (by jdemeyer):
* component: misc => porting
Old description:
> Consider the following scenario:
> {{{
> $ cd /tmp
> $ mkdir U
> $ chmod 770 U
> $ cd U
> $ touch test.py
> $ umask 022
> $ sage -t test.py #this fails as expected
> $ umask 002
> $ sage -t test.py #this fails on bsd but succeeds on boxen
> }}}
> Setting umask is supposed to be a work-around for allowing testing in
> group-writeable directories, but this doesn't work on OSX (or at least it
> doesn't on bsd.math.washington.edu). See also
> [https://groups.google.com/forum/?hl=en#!topic/sage-support/bmOxR3BgXBI
> sage-support].
New description:
Consider the following scenario:
{{{
$ cd /tmp
$ mkdir U
$ chmod 770 U
$ cd U
$ touch test.py
$ umask 022
$ sage -t test.py # this fails as expected
$ umask 002
$ sage -t test.py # this fails, but succeeds on non-OSX systems or other
directories besides /tmp
}}}
Since OS X always sets the group of files in `/tmp` to `wheel`, this
doesn' work. See also
[https://groups.google.com/forum/?hl=en#!topic/sage-support/bmOxR3BgXBI
sage-support].
--
--
Ticket URL: <http://trac.sagemath.org/ticket/15387#comment:1>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/sage-trac.
For more options, visit https://groups.google.com/groups/opt_out.
