#9551: Sage can try to write outside $SAGE_ROOT - potentially screwing a system
up
------------------------+---------------------------------------------------
Reporter: drkirkby | Owner: GeorgSWeber
Type: defect | Status: new
Priority: critical | Milestone: sage-4.7.1
Component: build | Keywords:
Work_issues: | Upstream: N/A
Reviewer: | Author:
Merged: | Dependencies:
------------------------+---------------------------------------------------
Comment(by ecurry):
It might be useful if the README.TXT file (eg. at
http://boxen.math.washington.edu/sage/src/README.txt) included a warning
against building Sage as root, such as the install guide
(http://www.sagemath.org/doc/installation/source.html#steps-to-install-
from-source - Step 7) has, at least until this ticket gets fixed.
-Eva
Replying to [ticket:9551 drkirkby]:
> As reported here:
>
> http://groups.google.co.uk/group/sage-
devel/browse_thread/thread/60d384d785d9f034/9cdf5d6fbecf23d0?lnk=gst&q=write+kirkby#9cdf5d6fbecf23d0
>
> Sage tried to write {{{/usr/lib/python2.4/site-packages/}}} on
''t2.math.washington.edu''. A larger section of the error is shown further
down the ticket, but the most critical line is:
>
> {{{
> error: could not create '/usr/lib/python2.4/site-packages/rpy2':
Permission denied
> }}}
>
> Recent(ish) version of Solaris 10 include Python 2.4.4 in
{{{/usr/bin}}}, with libraries in {{{/lib/python2.4/}}}, which is where
the Sage build tried to write.
>
> This was on the 4.5.alpha0 build, though I'm not aware of any one else
raising this issue, so it's quite possible nothing has been done to fix
the bug in the latest build (4.5 as I write).
>
> Since I'm not stupid enough to build Sage as root, this was not a
problem, and just resulted in a failed build. But I'm well aware many
people do build Sage as root, in which case this could be very serious. (I
guess one could argue they got what they deserved).
--
Ticket URL: <http://trac.sagemath.org/sage_trac/ticket/9551#comment:4>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/sage-trac?hl=en.