[MacPorts] #39850: Sandbox denies access when prefix/portdbpath not normalised

MacPorts noreply at macports.org
Mon Mar 17 00:41:59 PDT 2014


#39850: Sandbox denies access when prefix/portdbpath not normalised
-------------------------+-----------------------------
  Reporter:  jwhowse4@…  |      Owner:  cal@…
      Type:  defect      |     Status:  closed
  Priority:  Normal      |  Milestone:  MacPorts Future
 Component:  base        |    Version:  2.2.0
Resolution:  fixed       |   Keywords:
      Port:              |
-------------------------+-----------------------------

Comment (by cal@…):

 The sandbox prevents build (and install) routines from writing stuff
 outside the places they're supposed to write. MacPorts runs the
 installation process as root so that installation routines can change
 ownership of files (granted, we could use something like fakeroot for that
 – patches welcome). We've had some ports that were not correctly using a
 staging area to install their files in the past, but write directly to
 `/opt/local`. That doesn't give MacPorts any chance to track the files
 installed, which is why we like to avoid that. With sandboxing, these
 operations fail as they should.

-- 
Ticket URL: <https://trac.macports.org/ticket/39850#comment:61>
MacPorts <http://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list