Bug 534582 – dev-lang/orc-0.4.23 causes sandbox violations by /usr/bin/orcc ... in run/user/1000/orcexec.XXXXXX

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description José Romildo Malaquias 2015-01-04 09:48:07 UTC]

pulseaudio fails to install on my ~amd64 system with a sandbox violation:

 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-3842.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkstemp
S: deny
P: /run/user/1000/orcexec.XXXXXX
A: /run/user/1000/orcexec.XXXXXX
R: /run/user/1000/orcexec.XXXXXX
C: /usr/bin/orcc --implementation -o pulsecore/svolume-orc-gen.c /tmp/portage/media-sound/pulseaudio-5.0-r6/work/pulseaudio-5.0/src/pulsecore/svolume.orc

[Comment 1 José Romildo Malaquias 2015-01-04 09:52:11 UTC]

Created attachment 393140 [details]
media-sound:pulseaudio-5.0-r6:20150104-093558.log.gz

[Comment 2 José Romildo Malaquias 2015-01-04 09:53:06 UTC]

Created attachment 393142 [details]
The output of "emerge --info"

[Comment 3 Pacho Ramos 2015-01-04 10:42:52 UTC]

I guess we will need to check every reverse dep for this :S

Regarding for this concrete package, inheritting gnome2-utils.eclass and calling gnome2_environment_reset should fix this

[Comment 4 Pacho Ramos 2015-01-04 10:50:54 UTC]

Well, bug 499288 would be the best solution... but until it's handled at PM level I guess we will need to keep playing with the eclasses

[Comment 5 Jeroen Roovers (RETIRED) 2015-01-06 18:21:48 UTC]

*** Bug 535808 has been marked as a duplicate of this bug. ***

[Comment 6 Jeroen Roovers (RETIRED) 2015-01-06 18:22:30 UTC]

*** Bug 535792 has been marked as a duplicate of this bug. ***

[Comment 7 Jeroen Roovers (RETIRED) 2015-01-07 07:25:38 UTC]

*** Bug 535862 has been marked as a duplicate of this bug. ***

[Comment 8 Ben Kohler 2015-01-09 03:01:02 UTC]

*** Bug 536080 has been marked as a duplicate of this bug. ***

[Comment 9 Jeroen Roovers (RETIRED) 2015-01-09 10:37:27 UTC]

*** Bug 536090 has been marked as a duplicate of this bug. ***

[Comment 10 Michał Górny 2015-01-10 11:10:59 UTC]

Just committed the fix to pulseaudio:

+  10 Jan 2015; Michał Górny <[e-mail]> pulseaudio-5.0-r7.ebuild:
+  Call gnome2_environment_reset to fix sandbox access violations, bug #534582.

However, I don't think XDG stuff really belongs in gnome2-utils ;).

[Comment 11 Lorenzo Porta (Vindex17) 2015-01-10 11:59:36 UTC]

A workaround is to log in as user and then use ' su - ' to switch to root

[Comment 12 Pacho Ramos 2015-01-10 14:38:17 UTC]

(In reply to Michał Górny from comment #10)
[...] 
> However, I don't think XDG stuff really belongs in gnome2-utils ;).

We added it until something better is found, you will see similar things done in cmake, kde, gstreamer, qt and mono eclasses :(

[Comment 13 Pacho Ramos 2015-01-19 20:33:26 UTC]

I have just rebuilt all reverse deps without issues :/

[Comment 14 Jeroen Roovers (RETIRED) 2015-01-20 07:24:06 UTC]

*** Bug 537086 has been marked as a duplicate of this bug. ***

[Comment 15 Pacho Ramos 2015-01-20 11:32:34 UTC]

Ah, ok, I need to compile them in console (not X)... I am testing all reverse deps now

[Comment 16 Pacho Ramos 2015-01-21 13:29:07 UTC]

all reverse deps reviewed

[Comment 17 Zac Medico 2015-01-25 09:53:31 UTC]

Maybe sandbox isn't calling the portage helper for some reason? I see that you have sandobox-2.6-r1 installed.

[Comment 18 Zac Medico 2015-01-25 09:56:27 UTC]

(In reply to Zac Medico from comment #17)
Sorry, this comment was meant for bug 537128.