15:04 August 6, 2013

PYTHON_EGG_CACHE : dare to be stupid

So today I got this:

/home/jhammel/silvermirror/local/lib/python2.7/site-packages/pkg_resources.py:1054: UserWarning:
/home/jhammel/.python-eggs is writable by group/others and vulnerable to attack when used with
get_resource_filename. Consider a more secure location (set with .set_extraction_path or the
PYTHON_EGG_CACHE environment variable).
warnings.warn(msg, UserWarning)


Anyway, outside of annoying, its pretty f-ing stupid. You have a default egg cache in ~...or you can change it with the env variable PYTHON_EGG_CACHE...but you can't unset it.


The default, you idiots , is that eggs should be cached in a temporary directory that is deleted on interpreter exit...opt in, not opt out, and certainly not, you can't opt out