(Thank you, by the way, for actually reading some of the documentation
before writing this post, and for asking questions instead of jumping to
conclusions.)
At 06:43 PM 4/28/2006 +0200, M.-A. Lemburg wrote:
>I've now found this section in the documentation which seems to
>have the reason:
>
>h
At 06:20 PM 4/28/2006 +0200, M.-A. Lemburg wrote:
>A single malicious .pth file on PYTHONPATH could trick
>the user into running Python modules that he isn't really
>aware of.
>
>Adding directories to PYTHONPATH which are writable by
>others is easy, just add '/tmp' as entry in some .pth
>file. The
M.-A. Lemburg wrote:
>>> No, I'm talking about a format which has the same if not
>>> more benefits as what you're trying to achieve with the
>>> .egg file approach, but without all the magic and hacks.
>>>
>>> It's not like this wouldn't be possible to achieve.
>> That may or may not be true. Per
Phillip J. Eby wrote:
> At 09:54 PM 4/27/2006 +0200, M.-A. Lemburg wrote:
>> Note that I was talking about the .pth file being
>> writable, not the directory.
>
> Please stop this vague, handwaving FUD. You have yet to explain how this
> situation is supposed to arise. Is there some platform on
At 09:54 PM 4/27/2006 +0200, M.-A. Lemburg wrote:
>Note that I was talking about the .pth file being
>writable, not the directory.
Please stop this vague, handwaving FUD. You have yet to explain how this
situation is supposed to arise. Is there some platform on which files with
a .pth extensio
Phillip J. Eby wrote:
> At 06:47 PM 4/27/2006 +0200, M.-A. Lemburg wrote:
>> Just read that you are hijacking site.py for setuptools'
>> "just works" purposes.
>
> "hijacking" isn't the word I'd use; "wrapping" is what it actually
> does. The standard site.py is executed, there is just some pre-
At 06:47 PM 4/27/2006 +0200, M.-A. Lemburg wrote:
>Just read that you are hijacking site.py for setuptools'
>"just works" purposes.
"hijacking" isn't the word I'd use; "wrapping" is what it actually
does. The standard site.py is executed, there is just some pre- and
post-processing of sys.path.
Phillip J. Eby wrote:
> Please see
> http://svn.python.org/projects/sandbox/trunk/setuptools/doc/formats.txt for
> source, or http://peak.telecommunity.com/DevCenter/EggFormats for an
> HTML-formatted version.
>
> Included are summary descriptions of the formats of all of the standard
> metada
At 04:41 PM 4/25/2006 -0700, Brent Fulgham wrote:
>"Included are summary descriptions of the formats of all of the standard
>metadata produced by setuptools, along with pointers to the existing
>manuals that describe the syntax used for representing requirements, entry
>points, etc. as text. The .
"Included are summary descriptions of the formats of all of the standard
metadata produced by setuptools, along with pointers to the existing
manuals that describe the syntax used for representing requirements, entry
points, etc. as text. The .egg, .egg-info, and .egg-link formats and
layouts
Please see
http://svn.python.org/projects/sandbox/trunk/setuptools/doc/formats.txt for
source, or http://peak.telecommunity.com/DevCenter/EggFormats for an
HTML-formatted version.
Included are summary descriptions of the formats of all of the standard
metadata produced by setuptools, along wit
11 matches
Mail list logo
