Bugzilla Bug 223077

Many packages run latex (or pdflatex or something similar) when emerged, to
compile their documentation (often with USE=doc). If a font is encountered
which happens to be absent in /var/cache/fonts, metafont is called to generate
it. If VARTEXFONTS is not set, this will lead to a sandbox violation (unless
addwrite /var/cache/fonts is used). This was discussed in
http://groups.google.com/group/linux.gentoo.dev/browse_thread/thread/bf2e58fe200c0676/b72be3596cd2eb31
and
http://groups.google.com/group/linux.gentoo.dev/browse_thread/thread/1d67f8155c62098f#
Typically, an ebuild says something like

emake docs

All such cases should be changed to something like

VARTEXFONTS="${T}"/fonts emake docs

Here is a list of packages. There might be some false positives; if your
package does not call latex (or pdflatex or ...) at the build time, please,
ignore this bug.

app-backup@gentoo.org, wschlich@gentoo.org:
app-backup/bacula

emacs@gentoo.org, python@gentoo.org:
app-emacs/pymacs

emacs@gentoo.org, common-lisp@gentoo.org:
app-emacs/slime

cjk@gentoo.org:
app-i18n/canna

shell-tools@gentoo.org:
app-misc/tdl
[with USE=doc, dvi, ps, and pdf docs are installed, all gzipped.
Isn't this too much? pdf should not be bzip2ed]

kernel-misc@gentoo.org:
app-misc/fdutils

ada@gentoo.org:
dev-ada/xmlada
dev-ada/asis-gcc
dev-ada/asis-gpl

haskell@gentoo.org
dev-util/bnfc
[here dodoc is used to install a .pdf, and hence it's bzipped - not a good
idea]

haskell@gentoo.org, tex@gentoo.org:
dev-haskell/lhs2tex
[here a .pdf file is installed using dodoc, and hence will be bzip2ed - not a
goog idea]

ml@gentoo.org:
dev-lang/mlton

maintainer-needed@gentoo.org:
dev-lang/mmix
dev-libs/beecrypt

dev-util/ragel
[it's better to use insinto/doins for .pdf files]

vapier@gentoo.org:
dev-libs/libtomcrypt

common-lisp@gentoo.org:
dev-lisp/gcl
dev-lisp/cl-cffi
dev-lisp/cl-cgi-utils

dev-lisp/cl-xml-psychiatrist
[here latex is called directly; is 1 time enough? Also, .pdf is installed
bzipped - better not to do this]

dev-lisp/cl-tclink
[here the only place where the doc USE flag is used is commented out. Then
there is no need in this USE flag...]

tcltk@gentoo.org:
dev-tcltk/tkzinc

dev-embedded@gentoo.org:
dev-tinyos/tos

haskell@gentoo.org
dev-util/bnfc

games@gentoo.org:
games-board/freedoko

sound@gentoo.org:
media-sound/musescore
[doc USE flag never used???]

video@gentoo.org, media-video@gentoo.org:
media-video/dirac

netmon@gentoo.org, anant@gentoo.org:
net-analyzer/ns
[.pdf installed by dodoc and hence bzipped - not good]

netmon@gentoo.org:
net-analyzer/sonar

net-dialup@gentoo.org
net-dialup/mgetty
[here font generation is suppressed; better set VARTEXFONTS and not do this]

sci-biology@gentoo.org:
sci-biology/wise
[here .ps docs are installed unconditionally; it would be better to use the USE
flag doc. Also, before latex and dvips, export VARTEXFONTS=...]

sci@gentoo.org:
sci-libs/netcdf
sci-libs/pgplot
sci-misc/gri
sci-misc/nco

sci-mathematics@gentoo.org:
sci-mathematics/axiom
sci-mathematics/ginac
sci-mathematics/nusmv

robbat2@gentoo.org:
sys-block/btrace

hp-cluster@gentoo.org, kanaka@gentoo.org:
sys-cluster/mpich2

markusle@gentoo.org:
sys-cluster/charm

base-system@gentoo.org, tantive@gentoo.org:
sys-power/apcupsd

mobile@gentoo.org, genstef@gentoo.org:
sys-power/powersave

> emacs@gentoo.org, python@gentoo.org:
> app-emacs/pymacs

> emacs@gentoo.org, common-lisp@gentoo.org:
> app-emacs/slime

Fixed. (False positives? Both are not accessing the font cache, even if it's
empty. Anyway, the VARTEXFONTS assignment cannot harm.)

(In reply to comment #0)
> video@gentoo.org, media-video@gentoo.org:
> media-video/dirac

fixed

net-dialup/mgetty has been fixed.

musescore needs doxygen/latex -foo to build documentation it is using at
runtime,
and I'm aware it's an automagic dep., but as nothing is linked and system is
still functional (no revdep-rebuilding) if you unemerge them after I haven't
bothered to patch it out _yet_

but sorry, i'm not adding anything unnecessary to any of my ebuilds (it doesn't
fail)

(In reply to comment #4)
> but sorry, i'm not adding anything unnecessary to any of my ebuilds (it doesn't
> fail)

taking that back, adding musescore 0.9.2 with vartexfonts.

One more package that doesn't ebuild, because of a sandbox violation:

dev-tex/oesch

(In reply to comment #0)
> ml@gentoo.org:
> dev-lang/mlton

done

(In reply to comment #6)
> One more package that doesn't ebuild, because of a sandbox violation:
> 
> dev-tex/oesch

fixed that a while ago but forgot to thank you, so here it is: thanks.

sci@gentoo.org should be done.

btrace is fixed.