Skip to content

-m pdb -p -- other side cannot read debug script due to too-strict permissions #134546

Closed
@asottile

Description

@asottile

Bug report

Bug description:

  1. run python3.14
  2. find its pid
  3. sudo python3.14 -m pdb -p $pid

the pdb tab will hang, the other side will display similar to:

Python 3.14.0b1 (main, May  8 2025, 08:57:13) [GCC 13.3.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> Can't open debugger script /tmp/tmpmbdwo7d_:
                                                Traceback (most recent call last):
    File "/usr/lib/python3.14/_pyrepl/unix_console.py", line 422, in wait
                                                                             or bool(self.pollob.poll(timeout))
                               PermissionError: [Errno 13] Permission denied: '/tmp/tmpmbdwo7d_'

the debugger script needs to at least be readable by the unprivileged user to be opened:

$ ls -al /tmp/tmpmbdwo7d_
-rw------- 1 root root 190 May 22 16:51 /tmp/tmpmbdwo7d_

tempfile.NamedTemporaryFile("w", delete_on_close=False)

I believe a patch similar to this fixes it:

diff --git a/Lib/pdb.py b/Lib/pdb.py
index 78ee35f61bb..bb12d1baae8 100644
--- a/Lib/pdb.py
+++ b/Lib/pdb.py
@@ -75,6 +75,7 @@
 import code
 import glob
 import json
+import stat
 import token
 import types
 import atexit
@@ -3418,6 +3419,7 @@ def attach(pid, commands=()):
             )
         )
         connect_script.close()
+        os.chmod(connect_script.name, os.stat(connect_script.name).st_mode | stat.S_IRGRP | stat.S_IROTH)
         sys.remote_exec(pid, connect_script.name)
 
         # TODO Add a timeout? Or don't bother since the user can ^C?

CPython versions tested on:

3.14

Operating systems tested on:

Linux

Linked PRs

Activity

gaogaotiantian

gaogaotiantian commented on May 22, 2025

@gaogaotiantian
Member

That looks like the right solution to me. Do you want to make a PR? Or I can do it.

asottile

asottile commented on May 22, 2025

@asottile
ContributorAuthor

I can start one!

added
3.14bugs and security fixes
3.15new features, bugs and security fixes
on May 23, 2025
added a commit that references this issue on May 24, 2025

gh-134546: ensure remote pdb script is readable (#134552)

74a9c60
added a commit that references this issue on May 24, 2025

pythongh-134546: ensure remote pdb script is readable (pythonGH-134552)

added a commit that references this issue on May 24, 2025

[3.14] gh-134546: ensure remote pdb script is readable (GH-134552) (#…

de9444e
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    3.14bugs and security fixes3.15new features, bugs and security fixesstdlibPython modules in the Lib dirtype-bugAn unexpected behavior, bug, or error

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      `-m pdb -p` -- other side cannot read debug script due to too-strict permissions · Issue #134546 · python/cpython

      Follow Lee on X/Twitter - Father, Husband, Serial builder creating AI, crypto, games & web tools. We are friends :) AI Will Come To Life!

      Check out: eBank.nz (Art Generator) | Netwrck.com (AI Tools) | Text-Generator.io (AI API) | BitBank.nz (Crypto AI) | ReadingTime (Kids Reading) | RewordGame | BigMultiplayerChess | WebFiddle | How.nz | Helix AI Assistant