Bug#857922: Cache dir in Jython

Ole Streicher ole.streicher at gmx.de
Fri Mar 17 09:49:44 UTC 2017


One remark here for both bugs: IMO, the cache implementation and setup
in Jython as it is now is quite useless for Debian: If a normal user
runs Jython without setting python.cachedir to a user-writable location,
he will get warnings that he can't update the cache. If he is doing so,
he will not profit from the central cache.

The solution often found in the net (making the cache read/writable for
all users) is probably a security problem, since then anyone can
compromise the cache.

So, I would propose just to switch off the caching
(python.cachedir.skip=true), and let it up to the user to re-enable it
(with proper settings for his problem) if required. Anyway, two
modifications shold be done to resolve #857922 independent of this:

* change the cache dir to /var/cache/jython or similar, even if disabled
* clean up this cache when the package is removed/purged

Any thoughts here?

Best regards

Ole



More information about the pkg-java-maintainers mailing list