From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id GL2ZMd+vHWUDJgEA9RJhRA:P1 (envelope-from ) for ; Wed, 04 Oct 2023 20:33:03 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id GL2ZMd+vHWUDJgEA9RJhRA (envelope-from ) for ; Wed, 04 Oct 2023 20:33:03 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 82BE639975 for ; Wed, 4 Oct 2023 20:33:02 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=R1ckMz7w; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1696444383; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=swNBjaXgCEhe9TrRyuaf4qYQOXjT/kmdsL5KkW58Wis=; b=oYUS7xT82Cqd1YEnaw5srqPzhQkRPiP0IOHFEjwQwlSK6mhLLktsKLjRj986IfmvmpF8MO 2U8q23lLRdJ9mvaQeN6myuy+93o63yXQbRLMFMX+T37ZxBLzWDqQiUDC2mDbi3KvasPt/z 0Vpmv+L80u2u1vKMAT3o8gnSFspsmdF2EETAaOQT480cPI+sK82bmdflHye7jw+0TIa6Ce koeMfn7kGsGcoT3hzbbueKNbTnsUiKgapEmweNESE3zdw8x+gIDAVxjeeSsBQIBE5665lH lIQsRjqr3N6ptuWVV++YuLgGgvnndMttsN1L4uzYRAP5lYLBomyI/S3Onr/Izg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1696444383; a=rsa-sha256; cv=none; b=SBMrp8p5ym266nwZ1u/EuJEqJ3GthmkTcmCG/RTujHb+QxyygM8dr961WGNiicm6Jy9UD4 kaDE2iFWnDxVvmaxInln4URKRUepeP0dPOkvnVI+e4UOKtQ8Cm9viPh19fGDWCVMMI+qr1 e5eVuMW2No/xy9buGnAHyDuPJbzqnIUMIWwDiqMIPaDC31/SKNVkpwAJ7aguyMSli7AerO QrXmsybMWHE9ZsS0VD6oNCzv9iIvwNzRUgcER6soXlKBCDGD/UA1NDxhLN2TqhBP0voaEd cE4h/ztFNxRHLdJuL8J/WW9qGS8yVTgcpHstLCchQ7NPa8tv6r6TtWZERa06xg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=R1ckMz7w; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qo6g3-0000US-1M; Wed, 04 Oct 2023 14:32:56 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qo6ft-0000L0-4C for bug-guix@gnu.org; Wed, 04 Oct 2023 14:32:45 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qo6fs-0007Sc-RI for bug-guix@gnu.org; Wed, 04 Oct 2023 14:32:44 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qo6gA-0005Td-0G for bug-guix@gnu.org; Wed, 04 Oct 2023 14:33:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#66347: GHC packages inputs leak in guix shell Resent-From: Simon Tournier Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 04 Oct 2023 18:33:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 66347 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 66347@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.169644437121034 (code B ref -1); Wed, 04 Oct 2023 18:33:01 +0000 Received: (at submit) by debbugs.gnu.org; 4 Oct 2023 18:32:51 +0000 Received: from localhost ([127.0.0.1]:45353 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qo6fy-0005TC-Ot for submit@debbugs.gnu.org; Wed, 04 Oct 2023 14:32:51 -0400 Received: from lists.gnu.org ([2001:470:142::17]:47976) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qo6fw-0005Sy-W9 for submit@debbugs.gnu.org; Wed, 04 Oct 2023 14:32:49 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qo6fS-0008HV-6v for bug-guix@gnu.org; Wed, 04 Oct 2023 14:32:22 -0400 Received: from mail-wm1-x32b.google.com ([2a00:1450:4864:20::32b]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qo6fM-0007PY-8u for bug-guix@gnu.org; Wed, 04 Oct 2023 14:32:17 -0400 Received: by mail-wm1-x32b.google.com with SMTP id 5b1f17b1804b1-406532c49dcso280295e9.0 for ; Wed, 04 Oct 2023 11:32:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1696444330; x=1697049130; darn=gnu.org; h=mime-version:message-id:date:references:subject:to:from:from:to:cc :subject:date:message-id:reply-to; bh=swNBjaXgCEhe9TrRyuaf4qYQOXjT/kmdsL5KkW58Wis=; b=R1ckMz7wa9x5EPpu7bodL7QWn7mxwtI+2w/3K92uZ+5IO/t8cQECqSIIryKkj0eyAm i/Yy1iTFPNp9woWLStzkIzrojL/JLIeWJsGsaKqlD2XNVMIBJDDKmQ2FYus9B/+x4cLM IJI0SAGtOGvVv6vryVvIKgUleOyqfWjy2SfBI6TWlWsdYuGk5n0hiohqAJRqxMhKqnL/ WYbtPPYdNWO5BNs6KLErst1FSSU5W6PXTwNI59GzJ9PiAUWIKdfzzLZql4E6EKMr3jI4 HiUQVHC3Vlorqfub1v9NFztpB5ZpQkhiFRP2ZYJvq45TpcuLAS+q6JyrQYCMmG3f7tEU 0zQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1696444330; x=1697049130; h=mime-version:message-id:date:references:subject:to:from :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=swNBjaXgCEhe9TrRyuaf4qYQOXjT/kmdsL5KkW58Wis=; b=r9Zk5F1LXRy0PMYQvCTfJzXsMLHExMJDcIKnpjZvYlHCFGLnlJM3IzSdyoz1ebTzge LlabmetQbbJGE+Gz9SJTxwcVw8TAMyokcF1Vhq3QBFyHg89r+uQRbDawyIgaejjkF28W N3m/zZVZOEVO2xphL/jxOby8Lnq2W3ZvOObwL+l89VAbRDBSAFvHmtfFX6NR5Z+S4/x+ c+E5UjCD9dDofD51vv+6hI7aDo8/p9j5goLyGTRSdVbL0xPVKLiHQimoE2spWPphtMn/ WPMbbhy3rZwSatiQt3Ju67aZ7k0C68PVDU8XZ2Ld8/4Qway69+x+IpY5GSBLtKvhtFvu FDpg== X-Gm-Message-State: AOJu0YyCkfNvenf/oQc7pNs43BODrK+BtAFnJIM4G6yEHhhWIn5WtPEE gRxqG8H2Tfaq2srPbWb4BbhiyblJJvQ= X-Google-Smtp-Source: AGHT+IG6sFrrXS5Ib7v8STIhyLEK/hm+3Ijgi9AoMAxKB9qXoFUGygjyr2K1Yv6jGCMK2KNQ0sXCBw== X-Received: by 2002:a5d:5707:0:b0:323:2e5d:b7c6 with SMTP id a7-20020a5d5707000000b003232e5db7c6mr2792123wrv.0.1696444330448; Wed, 04 Oct 2023 11:32:10 -0700 (PDT) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id y9-20020a5d4ac9000000b0030ada01ca78sm4567551wrs.10.2023.10.04.11.32.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 04 Oct 2023 11:32:10 -0700 (PDT) From: Simon Tournier References: Date: Wed, 04 Oct 2023 20:26:29 +0200 Message-ID: <87jzs2z1ka.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2a00:1450:4864:20::32b; envelope-from=zimon.toutoune@gmail.com; helo=mail-wm1-x32b.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: 2.79 X-Migadu-Spam-Score: 2.79 X-Migadu-Scanner: mx1.migadu.com X-Migadu-Queue-Id: 82BE639975 X-TUID: isib1C7cfMnI Hi, Consider this: --8<---------------cut here---------------start------------->8--- $ guix shell -C ghc-esqueleto ghc gcc-toolchain -- ghci GHCi, version 9.2.5: https://www.haskell.org/ghc/ :? for help ghci> import Data.ByteString.Base64.URL.Lazy ghci> :t encode encode :: Data.ByteString.Lazy.Internal.ByteString -> Data.ByteString.Lazy.Internal.ByteString --8<---------------cut here---------------end--------------->8--- The package ghc-base64-bytestring should not be visible and instead, the user should see: : error: Could not find module `Data.ByteString.Base64.URL.Lazy' It is not a module in the current program, or in any known package. See discussion for more details if needed. GHC packages' inputs leak in guix shell Saku Laesvuori Tue, 15 Aug 2023 09:51:50 +0300 id:20230815065150.5joaxyts646mnpex@X-kone https://lists.gnu.org/archive/html/help-guix/2023-08 https://yhetil.org/guix/20230815065150.5joaxyts646mnpex@X-kone As reported in the discussion above, cabal is not exposing the package required as dependency. --8<---------------cut here---------------start------------->8--- $ guix shell -CN cabal-install coreutils zlib -D ghc-old-time $ cabal update $ env -u GHC_PACKAGE_PATH cabal install --lib esqueleto $ ghci ghci> import Database.Esqueleto.Experimental ghci> :t encode :1:1: error: Variable not in scope: encode ghci> import Data.ByteString.Base64.URL.Lazy : error: Could not load module `Data.ByteString.Base64.URL.Lazy' It is a member of the hidden package `base64-bytestring-1.2.1.0'. You can run `:set -package base64-bytestring' to expose it. (Note: this unloads all the modules in the current scope.) --8<---------------cut here---------------end--------------->8--- Cheers, simon