Hi,

I am using TG 1.0.8 with setuptools-0.6c9. Recently we have seen one
strange error which prevents installing our TG app from source tarball
with easy_install. For example, on my Ubuntu system...

$ rm -rf ~/.python-eggs
$ sudo easy_install my-tg-app.tar.gz

fails with SandboxViolation error. Initially I thought it might be
setuptools problem but after going through the setuptools code I found
that it's not a problem of setuptools as it does't allow modifying
filesystem outside the package builddir.

Further exploring the TG code, I found the root of the problem. In
setup.py, we have

from tubogears.finddata import find_package_data

which also processes turbogears/__init__.py where there are few lines
of code between 20-25 that loads
turbogears.extensions. During this process, setuptools tries to create
the cache (~/.python-eggs, as I have removed my cache directory) which
is outside the `BUILDDIR`, which is a violation of setuptools security
model.

The problem should be fixed either from setuptools allowing filesystem
operations inside the `egg cache` directory or TG should not load
extensions while build operations by checking for `bdist_egg` in
`sys.argv`.

Curious to know about the most feasible solution...

- Amit


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to