Skip to content

Pre-check/Birdcage permission error #1068

Open
Open
Pre-check/Birdcage permission error#1068
Labels
bugSomething isn't workingmedium priorityShould be handled as soon as possible

Description

@furi0us333
furi0us333
opened on May 4, 2023

Overview

I am getting the following error when trying to use phylum with pip: PermissionError: [Errno 13] Permission denied: '/etc/debian_version'

How To Reproduce

Steps to reproduce this behavior:

  1. Given the system information below, run phylum pip install "pyyaml==5.3.1"
  2. See error

Expected Behavior

Phylum pre-check/birdcage run without the exception.

Additional Context

System details:

$ python3 -m pip list
Package       Version
------------- -------
Pillow        9.5.0
pip           23.1.2
pkg_resources 0.0.0
setuptools    44.0.0

$ python3 -c 'import sys; print(sys.base_exec_prefix)'
/usr

$ uname -a
Linux DESKTOP-RQ0PRHE 5.15.90.1-microsoft-standard-WSL2 #1 SMP Fri Jan 27 02:56:13 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

$ phylum version
✅ phylum (Version v5.0.1)

Activity

  1. furi0us333
    added
    bugSomething isn't working
    needs triageNeeds to be reviewed or assigned
    on May 4, 2023
  2. cd-work
    assigned
    kylewillmon
    on May 4, 2023
  3. kylewillmon
    added
    medium priorityShould be handled as soon as possible
    and removed
    needs triageNeeds to be reviewed or assigned
    on May 9, 2023

  4. kylewillmon commented on Jun 21, 2023

    @kylewillmon
    kylewillmon
    on Jun 21, 2023
    Contributor

    Unfortunately, it appears that pip install "pyyaml==5.3.1" on WSL goes through the process of compiling pyyaml from source...

    To allow compiling C code, we would need to significantly weaken our sandbox.

  5. louislang commented on Jun 23, 2023

    @louislang
    louislang
    on Jun 23, 2023
    Contributor

    this seems like a pretty common thing people are likely to encounter. We should document this and perhaps consider adding some sort of escape hatch, e.g., Sandbox prevented package from compiling. Compile outside of the sandbox? [y/N]:

  6. cd-work commented on Jun 23, 2023

    @cd-work
    cd-work
    on Jun 23, 2023
    Contributor

    I feel like that would just completely circumvent the whole purpose of sandboxing it in the first place?

  7. kylewillmon
    removed their assignment
    on Aug 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingmedium priorityShould be handled as soon as possible

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions