Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 325611 - app-accessibility/orca: sandbox access violation when updating
Summary: app-accessibility/orca: sandbox access violation when updating
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] GNOME (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gnome Accessibility (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-06-25 21:39 UTC by René Gabriëls
Modified: 2011-03-12 15:28 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
sandbox-27449.log (sandbox-27449.log,10.32 KB, text/plain)
2010-07-12 10:53 UTC, Pacho Ramos
Details
build.log (orca-2.30.2:20100712-105126.log,25.07 KB, text/plain)
2010-07-12 10:57 UTC, Pacho Ramos
Details
Build log when emerge fails (build.log,15.58 KB, text/plain)
2010-07-27 15:17 UTC, René Gabriëls
Details

Note You need to log in before you can comment on or make changes to this bug.
Description René Gabriëls 2010-06-25 21:39:20 UTC
Sandbox access violation when upgrading to orca-2.30.2 (from orca-2.30.1).

Reproducible: Always

Steps to Reproduce:
1. emerge orca

Actual Results:  
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-7374.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /root/.gconf/.testing.writeability
A: /root/.gconf/.testing.writeability
R: /root/.gconf/.testing.writeability
C: /usr/libexec/gconfd-2 

F: unlink
S: deny
P: /root/.gconf/.testing.writeability
A: /root/.gconf/.testing.writeability
R: /root/.gconf/.testing.writeability
C: /usr/libexec/gconfd-2 

F: open_wr
S: deny
P: /root/.gconfd/saved_state
A: /root/.gconfd/saved_state
R: /root/.gconfd/saved_state
C: /usr/libexec/gconfd-2 
--------------------------------------------------------------------------------



Expected Results:  
Successful emerge

emerge --info

Portage 2.2_rc67 (default/linux/x86/10.0/desktop, gcc-4.4.4, glibc-2.11.2-r0, 2.6.34-rc6-61527-ga7c5427-dirty i686)
=================================================================
System uname: Linux-2.6.34-rc6-61527-ga7c5427-dirty-i686-Intel-R-_Pentium-R-_M_processor_1400MHz-with-gentoo-2.0.1
Timestamp of tree: Fri, 25 Jun 2010 15:00:01 +0000
ccache version 2.4 [disabled]
app-shells/bash:     4.1_p7
dev-java/java-config: 2.1.11
dev-lang/python:     2.6.5-r2, 3.1.2-r3
dev-util/ccache:     2.4-r8
dev-util/cmake:      2.8.1-r2
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.6.1-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.65-r1
sys-devel/automake:  1.8.5-r3, 1.9.6-r2, 1.10.3, 1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.4.4-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.10
virtual/os-headers:  2.6.34
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="*"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -mmmx -msse -msse2 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/conf.d /etc/modules.autoload.d /usr/share/X11/xkb /usr/share/cursors/xorg-x11/default /var/spool/torque"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/init.d /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev"
CXXFLAGS="-O2 -march=pentium-m -mmmx -msse -msse2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distlocks fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp://gentoo.tiscali.nl/pub/mirror/gentoo ftp://ftp.snt.utwente.nl/pub/os/linux/gentoo"
LANG="en_US.utf8"
LC_ALL=""
LDFLAGS="-Wl,-O1"
LINGUAS="en en_GB en_US nl"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/var/lib/layman/x11"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X Xaw3d a52 aac aalib accessibility acl acpi aim alsa apache2 audiofile avahi bash-completion berkdb bidi blas bluetooth branding bzip2 cairo cddb cdparanoia cdr cli consolekit cracklib crypt css ctype cups curl cvs cxx dbus dga djvu doc dri dts dvd dvdr dvdread eds emacs emboss encode evo exif expat fam fbcon ffmpeg fftw firefox flac fontconfig foomaticdb fortran ftp gcj gd gdbm geoip gif gimp glut gmp gnome gnuplot gnutls gphoto2 gpm graphviz gstreamer gtk gtkhtml guile hal hddtemp iconv icq idn imagemagic imap ipv6 jabber jack java javascript jingle joystick jpeg jpeg2k kerberos lame latex lcms ldap libcaca libnotify libsamplerate libwww lm_sensors lua lzo mad maildir matroska mbox mikmod mime mmap mmx mng modplug modules mono mp3 mp4 mpeg mpi mplayer msn mudflap musepack mysql ncurses nls nntp nptl nptlonly nsplugin ocaml offensive ogg openal openexr opengl openmp pam pango pcmcia pcre pda pdf perl php plotutils png policykit posix ppds pppd pulseaudio python qt3support qt4 quicktime raw readline reflection rss ruby samba sasl scanner sdl session slang sndfile sockets speex spell spl sqlite sse sse2 ssl startup-notification subversion svg svga sysfs taglib tcl tcpd theora threads tiff timidity tk truetype unicode usb vcd videos vorbis wavpack wifi win32codecs wmf wxwindows x264 x86 xattr xcb xcomposite xinerama xml xorg xpm xscreensaver xulrunner xv xvid yahoo zeroconf zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev joystick keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_GB en_US nl" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel i915 vesa vga" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Ivan Iraci 2010-06-26 13:41:47 UTC
(In reply to comment #0)

> Sandbox access violation when upgrading to orca-2.30.2 (from orca-2.30.1).

Same here.
Comment 2 Pacho Ramos gentoo-dev 2010-06-27 12:22:35 UTC
Seems to be caused by a segfault I can see in /var/log/messages while updating
Comment 3 Pacho Ramos gentoo-dev 2010-06-27 12:24:08 UTC
Jun 24 11:43:22 belkin2 kernel: at-spi-registry[10338]: segfault at 18 ip 00007fc77f0cafa1 sp 00007fff472cb2e0 error 4 in libgconf-2.so.4.1.5[7fc77f0a4000+3b
000]

Jun 24 11:43:43 belkin2 kernel: at-spi-registry[13102]: segfault at 18 ip 00007fd852132fa1 sp 00007fffd9c96f30 error 4 in libgconf-2.so.4.1.5[7fd85210c000+3b000]
Comment 4 Pacho Ramos gentoo-dev 2010-06-27 12:26:34 UTC
Please attach full build.log when it occurs
Comment 5 Pacho Ramos gentoo-dev 2010-07-05 18:04:52 UTC
(In reply to comment #3)
> Jun 24 11:43:22 belkin2 kernel: at-spi-registry[10338]: segfault at 18 ip
> 00007fc77f0cafa1 sp 00007fff472cb2e0 error 4 in
> libgconf-2.so.4.1.5[7fc77f0a4000+3b
> 000]
> 
> Jun 24 11:43:43 belkin2 kernel: at-spi-registry[13102]: segfault at 18 ip
> 00007fd852132fa1 sp 00007fffd9c96f30 error 4 in
> libgconf-2.so.4.1.5[7fd85210c000+3b000]
> 

They are shown even when no sandbox violation occurs, then, the problem could be in other place :-|
Comment 6 Pacho Ramos gentoo-dev 2010-07-05 18:13:26 UTC
Are you able to reproduce the sandbox violation problem? I have tried to reproduce it:
1. Update from 2.28.3 to 2.30.2 -> no problem
2. Copy 2.30.2 ebuild to 2.30.1 and, then, try to update from 2.30.1 to 2.30.2 -> no problem :-/
Comment 7 Pacho Ramos gentoo-dev 2010-07-08 16:55:30 UTC
Can you please try to reproduce and, in that case, attach build.log? I am no longer able to get the failure :-/

Thanks
Comment 8 Ivan Iraci 2010-07-10 07:44:59 UTC
(In reply to comment #7)

> Can you please try to reproduce and, in that case, attach build.log? I am no
> longer able to get the failure :-/

Sorry for the lag.

I was able to emerge it without any problem four days after my last comment. I cannot understand what changed between the two attempts.
Comment 9 Pacho Ramos gentoo-dev 2010-07-12 10:53:24 UTC
Created attachment 238421 [details]
sandbox-27449.log
Comment 10 Pacho Ramos gentoo-dev 2010-07-12 10:57:13 UTC
Created attachment 238425 [details]
build.log
Comment 11 Pacho Ramos gentoo-dev 2010-07-13 08:36:48 UTC
This is not a 2.30 regression, I get the same when trying to merge app-accessibility/orca-2.28.3, to reproduce, you simply need to reboot and, then, emerge orca
Comment 12 René Gabriëls 2010-07-27 15:17:36 UTC
Created attachment 240333 [details]
Build log when emerge fails

I completely forgot about this bug, because it emerged fine during the next 'emerge -DuN world'.  However, the bug is still there (see attachment).  I also get the segfault in /var/log/everything/current, but no idea if it's related to the sandbox violation.
Comment 13 Pacho Ramos gentoo-dev 2010-09-02 15:46:23 UTC
We will probably have to use addpredict until we find real culprit :-S
Comment 14 Pacho Ramos gentoo-dev 2010-09-07 22:03:50 UTC
+  07 Sep 2010; Pacho Ramos <pacho@gentoo.org> orca-2.30.2.ebuild:
+  Add needed addpredicts to prevent sandbox violations reported in bug
+  #325611 until root cause is found.
+

But I have failed to found that cause, then, any help on this is highly appreciated :-|
Comment 15 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-09-25 13:38:01 UTC
the root cause is probably the same than in other ebuilds using gconf, it's a problem with gconf not respecting various env variable to locate its home folder.
Comment 16 Pacho Ramos gentoo-dev 2011-03-06 11:32:43 UTC
Should we close this with addpredict workaround or a better fix can be prepared?
Comment 17 Pacho Ramos gentoo-dev 2011-03-12 15:28:28 UTC
Will close (as done in other similar cases where gconf is biting us in similar ways), also, gconf is deprecated then, we hope to now have these problems in the future when it's totally dropped