Bugzilla Bug 133573

dev-libs/apr-0.9.12  USE="ipv6 -urandom"

--- SNIP ---
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY
---------------------------
LOG FILE = "/var/log/sandbox/sandbox-dev-libs_-_apr-0.9.12-24344.log"

link:      /dev/sem.apr_autoconf
unlink:    /dev/sem.0koUvn
--------------------------------------------------------------------------------
--- SNAP ---


emerge --info:
Portage 2.1_rc1-r2 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.4-r3,
2.6.16-inobas-jarjar-r1 i686)
=================================================================
System uname: 2.6.16-inobas-jarjar-r1 i686 Intel(R) Xeon(TM) CPU 2.40GHz
Gentoo Base System version 1.6.14
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r5
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/eselect/compiler /etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.tu-clausthal.de/pub/linux/gentoo/     
ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo     
ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/     
ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo     
ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo     
ftp://ftp.wh2.tu-dresden.de/pub/mirrors/gentoo     
ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo     
ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/     
ftp://ftp.gentoo.mesh-solutions.com/gentoo/     
ftp://pandemonium.tiscali.de/pub/gentoo/     
ftp://ftp.rz.tu-bs.de/pub/mirror/ftp.gentoo.org/gentoo-distfiles/"
LINGUAS="de en us"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 7zip aalib acl acpi alsa apache2 apm arts avi bash-completion bcmath
berkdb bidi bitmap-fonts bzip2 caps cdb cdr cli crypt cscope ctype cups dba dbx
dri dvdr eds emboss encode esd expat flatfile foomaticdb fortran ftp gd gdbm
geoip gif gmp gpm gstreamer gtk gtk2 hal howl idn imlib inifile innodb ipv6
isdnlog jpeg kerberos krb4 ldap libg++ libwww mad maildir memlimit mikmod mime
mmap mmx motif mp3 mpeg mysql ncurses nls nocd nptl nptlonly ogg opengl oss pam
pcre pdflib perl php png posix pppd profile python qt quicktime readline
reflection sasl sdl session sharedext sharedmem simplexml slang snmp soap
sockets spell spl sse sse2 ssl sysvipc szip tcpd threads tokenizer truetype
truetype-fonts type1-fonts udev unicode usb vorbis xml xml2 xmlrpc xmms xorg xv
zip zlib elibc_glibc input_devices_keyboard input_devices_mouse kernel_linux
linguas_de linguas_en linguas_us userland_GNU video_cards_ati"
Unset:  ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL,
LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS

The current apache ebuild have the following "hack" in it that looks like it
addresses this exact issue, only it's affecting apr now instead of apache:

# Fix for bug #24215 - robbat2@gentoo.org, 30 Oct 2003
# We pre-load the cache with the correct answer!  This avoids
# it violating the sandbox.  This may have to be changed for
# non-Linux systems or if sem_open changes on Linux.  This
# hack is built around documentation in /usr/include/semaphore.h
# and the glibc (pthread) source
echo 'ac_cv_func_sem_open=${ac_cv_func_sem_open=no}' >> ${S}/config.cache

I have applied this hack to the apr-0.9.12 and apr-1.2.7 ebuilds.
Thanks for the report!