id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	blockedby	blocking	notify_on_close	platform	project
8540	Remove CONFINCLUDEDIR, CONFINCLUDEPY, INCLUDEPY, INCLUDEDIR, etc from sysconfigdata	Zach Pearson	Zach Pearson	"We pinned setuptools to version 65.1.1 to avoid a change in distutils that [https://github.com/pypa/distutils/pull/173 changed the order of precedence for finding Python headers]. Before that change, the includes local to ChimeraX were preferred. After, we always got system Python headers. I [https://github.com/pypa/distutils/issues/178#issuecomment-1419517007 opened an issue] with distutils, requesting that the nearest Python be used, but it's been [https://github.com/pypa/distutils/issues/178#issuecomment-1398625173 implied that our environment and others like ours are simply misconfigured]. 

[https://github.com/pypa/distutils/issues/178#issuecomment-1334264091 It does seem to work] to just remove the values of the sysconfigdata variables listed in this ticket, though we might need to remove others to get stray library folders out of linkers' paths. 

This has come up again today because I received an email from GitHub pointing out a security vulnerability in 65.1.1

We have a script that cleans sysconfigdata of unwanted variables in prereqs/Python; I just propose adding at least these four from the title to it.

"	defect	closed	major		Build System		fixed		chimerax-programmers				all	ChimeraX