If you just want to silence the error with a blunt instrument, then you could
try a parameterization where sandbox-path-permissions is set to:
(append (map (λ (p) `(exists ,p)) (filesystem-root-list)
(sandbox-path-permissions)))
This suffices since it is an existential check, not a file read.
~slg
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, January 4, 2021 6:47 PM, 'William J. Bowman' via Racket Users
<racket-users@googlegroups.com> wrote:
> I have a sandbox that loads scribble/manual (indirectly) to render some HTML.
> But it crashes with the following error:
>
> > racket -e "(require racket/sandbox)" -e "((make-evaluator 'racket/base)
> > '(require scribble/manual))"
>
> file-exists?: `exists' access denied for /etc/ssl/cert.pem
> errortrace...:
> context...:
> do-error
> security-guard-check-file
> ->host
>
> file-exists?
> ..../racket/racket/collects/openssl/mzssl.rkt:397:0: x509-root-sources
> interpret
> [repeats 1 more time]
> proc
> call-in-empty-metacontinuation-frame
> body of "..../racket/racket/collects/openssl/mzssl.rkt"
> interpret-expr
> body of top-level
> run-module-instance!
> [repeats 12 more times]
> perform-require!
> loop
>
> This is strange, since openssl shouldn't actually be needed.
>
> I could just allow access to the file, but the path depends on which
> operating system I'm running on making this slightly complicated, and the
> access isn't necessary.
>
> Is there some way to trick Racket into not trying to do this, or else some
> parameter I can use to provide access to whatever openssl is going to try to
> touch without hardcoding the paths?
>
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> William J. Bowman
>
> ------------------
>
> You received this message because you are subscribed to the Google Groups
> "Racket Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to racket-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/racket-users/X/OpEPyvzOyzQql2%40williamjbowman.com.
--
You received this message because you are subscribed to the Google Groups
"Racket Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to racket-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/racket-users/3-wYvswd9nUzA7L0nrfn-oSNXt9AeIYF6hZg65oVNAWsF_N65dmRgKQhc6Unzappdztz-10ui5_hPLqvDUO3pL135g7cqcQsmY1s5EzyuAY%3D%40sagegerard.com.
