#16736: sagenb: SandboxViolation in webassets
-------------------------------------+-------------------------------------
       Reporter:  vbraun             |        Owner:
           Type:  defect             |       Status:  needs_review
       Priority:  major              |    Milestone:  sage-6.3
      Component:  user interface     |   Resolution:
       Keywords:                     |    Merged in:
        Authors:  Volker Braun       |    Reviewers:
Report Upstream:  N/A                |  Work issues:
         Branch:                     |       Commit:
  u/vbraun/sagenb__sandboxviolation_in_webassets|  
a487a0d673527ab9a9b57c36edf9c5ed0a7ac483
   Dependencies:                     |     Stopgaps:
-------------------------------------+-------------------------------------
Changes (by {'newvalue': u'Volker Braun', 'oldvalue': ''}):

 * status:  new => needs_review
 * commit:   => a487a0d673527ab9a9b57c36edf9c5ed0a7ac483
 * author:   => Volker Braun


Old description:

> {{{
> Processing webassets-0.9.tar.gz
> Writing /tmp/easy_install-hklIUJ/webassets-0.9/setup.cfg
> Running webassets-0.9/setup.py -q bdist_egg --dist-dir /tmp/easy_install-
> hklIUJ/webassets-0.9/egg-dist-tmp-Cwkw_W
> error: SandboxViolation: chmod('/home/buildslave-
> sage/slave/sage_git/dot_sage/.python-eggs/Pillow-2.2.2-py2.7-linux-x86_64
> .egg-tmp/PIL/tmpelb5a7.$extract', 493) {}
> }}}
> Possibly due to the newer setuptools doing a better job at checking for
> shenanigans...

New description:

 {{{
 Processing webassets-0.9.tar.gz
 Writing /tmp/easy_install-hklIUJ/webassets-0.9/setup.cfg
 Running webassets-0.9/setup.py -q bdist_egg --dist-dir /tmp/easy_install-
 hklIUJ/webassets-0.9/egg-dist-tmp-Cwkw_W
 error: SandboxViolation: chmod('/home/buildslave-
 sage/slave/sage_git/dot_sage/.python-eggs/Pillow-2.2.2-py2.7-linux-x86_64
 .egg-tmp/PIL/tmpelb5a7.$extract', 493) {}
 }}}
 Possibly due to the newer setuptools doing a better job at checking for
 shenanigans...

 New tarball:
 http://boxen.math.washington.edu/home/vbraun/upstream/setuptools-5.4.1.tar.gz

--

Comment:

 I guess the ideal solution would be to use distutils / pip instead of
 easy_install (who cares about binary eggs)? Though that would probably be
 a bigger task. For now, just allow chmod outside of the setuptools sandbox
 (and, really, fixing permissions isn't so bad).

 Updating to the latest setuptools alone didn't fix it, but we should do
 that anyway.
 ----
 New commits:
 
||[http://git.sagemath.org/sage.git/commit/?id=425ebcc90119344116f8d1e113410b0e57c91ec8
 425ebcc]||{{{Update to setuptools 5.4.1}}}||
 
||[http://git.sagemath.org/sage.git/commit/?id=a487a0d673527ab9a9b57c36edf9c5ed0a7ac483
 a487a0d]||{{{Allow chmod outside of the sandbox}}}||

--
Ticket URL: <http://trac.sagemath.org/ticket/16736#comment:3>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica, 
and MATLAB

-- 
You received this message because you are subscribed to the Google Groups 
"sage-trac" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/sage-trac.
For more options, visit https://groups.google.com/d/optout.

Reply via email to