If you just want to silence the error with a blunt instrument, then you could
try a parameterization where sandbox-path-permissions is set to:
(append (map (λ (p) `(exists ,p)) (filesystem-root-list)
(sandbox-path-permissions)))
This suffices since it is an existential check, not a file read.
~slg
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, January 4, 2021 6:47 PM, 'William J. Bowman' via Racket Users
<[email protected]> wrote:
> I have a sandbox that loads scribble/manual (indirectly) to render some HTML.
> But it crashes with the following error:
>
> > racket -e "(require racket/sandbox)" -e "((make-evaluator 'racket/base)
> > '(require scribble/manual))"
>
> file-exists?: `exists' access denied for /etc/ssl/cert.pem
> errortrace...:
> context...:
> do-error
> security-guard-check-file
> ->host
>
> file-exists?
> ..../racket/racket/collects/openssl/mzssl.rkt:397:0: x509-root-sources
> interpret
> [repeats 1 more time]
> proc
> call-in-empty-metacontinuation-frame
> body of "..../racket/racket/collects/openssl/mzssl.rkt"
> interpret-expr
> body of top-level
> run-module-instance!
> [repeats 12 more times]
> perform-require!
> loop
>
> This is strange, since openssl shouldn't actually be needed.
>
> I could just allow access to the file, but the path depends on which
> operating system I'm running on making this slightly complicated, and the
> access isn't necessary.
>
> Is there some way to trick Racket into not trying to do this, or else some
> parameter I can use to provide access to whatever openssl is going to try to
> touch without hardcoding the paths?
>
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> William J. Bowman
>
> ------------------
>
> You received this message because you are subscribed to the Google Groups
> "Racket Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/racket-users/X/OpEPyvzOyzQql2%40williamjbowman.com.
--
You received this message because you are subscribed to the Google Groups
"Racket Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/racket-users/3-wYvswd9nUzA7L0nrfn-oSNXt9AeIYF6hZg65oVNAWsF_N65dmRgKQhc6Unzappdztz-10ui5_hPLqvDUO3pL135g7cqcQsmY1s5EzyuAY%3D%40sagegerard.com.
