Ok, thank for your time. > Yes, and this is one of the reasons why PyInstaller denies running as roof (or fakeroot) Apparently I cannot convince you that you'll need to find an alternative approach to really solve this issue, instead of slapping on some (more) restrictions.
Since the current restrictions can be easily bypassed I can always use that technique for now. On Thursday, March 28, 2013 11:14:06 AM UTC+1, Hartmut Goebel wrote: > > Am 28.03.2013 10:31, schrieb Joachim Metz: > > Apparently I need to spell it out. > > This was largely meant as an example that usercustomize.py can override > most of the python interpreter. > > > Yes, and this is one of the reasons why PyInstaller denies running as roof > (or fakeroot). Since PyInstaller is changing sys.path to run directly from > the download/development directory, an intruder could simply drop in some > module there. > > Please adopt your build process to not require PyInstaller running as > root/fakeroot. As you already showed, there is a simple work-around, there > is not need to weaken PyInstaller. (NB: I suggest changing the UID in your > build-script instead of hacking arounf with a usercustomize.py. This is > more transparent to builder.) > > -- > Schönen Gruß > Hartmut Goebel > Dipl.-Informatiker (univ), CISSP, CSSLP > > Goebel Consult > http://www.goebel-consult.de > > Monatliche Kolumne: > http://www.cissp-gefluester.de/2011-11-in-troja-nichts-neues > Blog: http://www.goebel-consult.de/blog/20060920 > > Goebel Consult ist Mitglied bei http://www.7-it.de/ > -- You received this message because you are subscribed to the Google Groups "PyInstaller" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/pyinstaller?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
