Bug 564944 – app-doc/doxygen-1.8.10-r1[doc]: sandbox violation: ACCESS DENIED: mkdir: /var/cache/fonts/pk/ljfour/public

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Yarda 2015-11-05 15:18:58 UTC]

The doxygen-1.8.10-r1 is failing for me with sandbox violation. It should be also bug in other utility, not doxygen itself.

Reproducible: Always

Steps to Reproduce:
1. emerge -uDN world

Actual Results:  
kpathsea: Running mktexpk --mfmode / --bdpi 600 --mag 1+0/600 --dpi 600 wasy10
 * ACCESS DENIED:  mkdir:        /var/cache/fonts/pk/ljfour/public
 * ISE:write_logfile: unable to append logfile: /var/log/sandbox/sandbox-13859.log
 * ../../sandbox-2.6/libsandbox/libsandbox.c:check_syscall():879: failure (Chybný popisovač souboru):
 * ISE: 
        abs_path: /var/cache/fonts/pk/ljfour/public
        res_path: /var/cache/fonts/pk/ljfour/public
/usr/lib64/libsandbox.so(+0xba71)[0x7f39efcf6a71]
/usr/lib64/libsandbox.so(+0xbb78)[0x7f39efcf6b78]
/usr/lib64/libsandbox.so(+0x59a2)[0x7f39efcf09a2]
/usr/lib64/libsandbox.so(mkdir+0x6c)[0x7f39efcf5c4c]
mkdir[0x40266c]
mkdir[0x401ec4]
mkdir[0x40494d]
mkdir[0x401c53]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f39ef9718f5]
mkdir[0x401d09]
/proc/15319/cmdline: mkdir ././var/cache/fonts/pk/ljfour/public

/usr/share/texmf-dist/web2c/mktexdir: řádek 40: 15319 Neúspěšně ukončen (SIGABRT)        mkdir "./$pathcomp"
mktexpk: /usr/share/texmf-dist/web2c/mktexdir /var/cache/fonts/pk/ljfour/public/wasy failed.
kpathsea: Appending font creation commands to missfont.log.
make[4]: *** [doxygen_manual.pdf] Chyba 1
doc/CMakeFiles/docs.dir/build.make:63: návod pro cíl „doc/CMakeFiles/docs“ selhal
make[3]: *** [doc/CMakeFiles/docs] Chyba 2
CMakeFiles/Makefile2:506: návod pro cíl „doc/CMakeFiles/docs.dir/all“ selhal
make[2]: *** [doc/CMakeFiles/docs.dir/all] Chyba 2
CMakeFiles/Makefile2:513: návod pro cíl „doc/CMakeFiles/docs.dir/rule“ selhal
make[1]: *** [doc/CMakeFiles/docs.dir/rule] Chyba 2
Makefile:290: návod pro cíl „docs“ selhal
make: *** [docs] Chyba 2
 * ERROR: app-doc/doxygen-1.8.10-r1::gentoo failed (compile phase):
 *   emake failed
 *
 * If you need support, post the output of `emerge --info '=app-doc/doxygen-1.8.10-r1::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=app-doc/doxygen-1.8.10-r1::gentoo'`.
 * The complete build log is located at '/var/tmp/portage/app-doc/doxygen-1.8.10-r1/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/app-doc/doxygen-1.8.10-r1/temp/environment'.
 * Working directory: '/var/tmp/portage/app-doc/doxygen-1.8.10-r1/work/doxygen-1.8.10_build'
 * S: '/var/tmp/portage/app-doc/doxygen-1.8.10-r1/work/doxygen-1.8.10'

>>> Failed to emerge app-doc/doxygen-1.8.10-r1, Log file:

>>>  '/var/tmp/portage/app-doc/doxygen-1.8.10-r1/temp/build.log'

Expected Results:  
No build failure

emerge --info:
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=athlon64 -mtune=athlon64 -pipe -fstack-protector"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -march=athlon64 -mtune=athlon64 -pipe -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org ftp://ftp.sh.cvut.cz/MIRRORS/gentoo/gentoo"
LANG="cs_CZ.UTF-8"
LC_ALL="cs_CZ.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j4 -l2.0"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="3dnow 3dnowext 7zip X X509 a52 aac aalib acl acpi additions afterimage aio alsa amd64 amr amrnb amrwb apache2 apng artswrappersuid authfile auto-hinter bash-completion berkdb blender-game bluetooth branding bzip2 cairo ccache cdda cddb cdio cdr cdrom cdsound cgi chroot clamav clamd clang cli cmdsubmenu consolekit cracklib crypt cscope cuda cups custom-cflags custom-optimization cxx dbus declarative dedicated device-mapper dia directfb doc down-root dri dts dv dvb dvd dvdnav dvdr dynload emboss emerald enca encode exif extensions extra fam fat fbcon ffmpeg fftw firefox flac flash fontconfig fortran freetts ftp fts3 fuse g3dvl gallium games gbm gd gdbm gdu geoip gif glamor glitz glut gmp gpm graphics gstreamer gtk harfbuzz hddtemp hpn humanities iconv icq icu ident iptv ipv6 irc jabber jadetex jamu java javascript jit joystick jpeg kdrive kerberos kpathsea laptop lcms ldap libcaca libnotify libsamplerate lirc lm_sensors logrotate logwatch lzma lzo mad mainmenuhooks math mbrola md5sum mikmod minizip mmx mmxext mng mod modules mouse mozdevelop mp2 mp3 mp4 mpeg mpeg2 mpeg3 mplayer msn multilib multiuser music mysql nas ncurses nls nptl nsplugin ntfs ntfsprogs nvidia nvram ogg opencl opengl openmp pam pango pcre pda pdf php pixbuf png policykit ppds pstricks publishers python qt3support qt4 rar rdesktop readline rss rtc rtsp samba sasl savedconfig science screen sdl seamonkey seccomp sensord session setup setup-plugin sip sipim slang smime sound sounds sox spell srt sse sse2 sse3 ssl startup-notification stream submenu subtitles subversion suid svg sysfs syslog system-cairo system-icu system-jpeg system-sqlite tcpd tex4ht theora threads threadsafe tiff timercmd timerinfo tk truetype ttxtsubs udev udisks unicode unsupported upnp upower usb uvm v4l2 vcd vdpau vdr vim-syntax vim-with-x vlc vnc volctrl vorbis wav wifi wmf wxwidgets wxwindows x264 xattr xcb xcomposite xetex xft xine xinerama xml xosd xplanet xpm xscreensaver xv xvid xvmc zip zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext sse sse2 sse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard joystick" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="cs en" LIRC_DEVICES="devinput" NETBEANS_MODULES="cnd dlight enterprise ergonomics groovy identity mobility php profiler ruby apisupport harness ide java nb websvccommon" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

[Comment 1 Yarda 2015-11-05 15:19:49 UTC]

(In reply to Yarda from comment #0)
> The doxygen-1.8.10-r1 is failing for me with sandbox violation. It should be
> also bug in other utility, not doxygen itself.
> 

It could be bug in other utility, not doxygen itself.

[Comment 2 Libor Bukata 2015-12-12 12:18:32 UTC]

I had encountered the same error. It is related to the generation of the documentation. The package is compiled without errors if USE="-doc".

[Comment 3 Matthias Maier 2016-02-28 04:30:04 UTC]

I cannot reproduce. (I tried with different LANG and LC_ALL settings).

And I'm not terribly good at guessing what kpathsea is doing here:

  kpathsea: Running mktexpk --mfmode / --bdpi 600 --mag 1+0/600 --dpi 600 wasy10
    * ACCESS DENIED:  mkdir:        /var/cache/fonts/pk/ljfour/public

Please attach a full build log to this bug report and reopen. The version of dev-libs/kpathsea and texlive installed would also be a good information.

[Comment 4 Yarda 2016-02-28 10:50:34 UTC]

Created attachment 426874 [details]
Build log

Adding the build log with failure. I don't know what's the log upload policy here - previously I added it gzipped to save some bandwidth/storage space as I am used to from other projects, but it introduced some trouble, so adding it uncompressed now.

[Comment 5 Yarda 2016-02-28 10:53:39 UTC]

dev-libs/kpathsea(In reply to Matthias Maier from comment #3)
> I cannot reproduce. (I tried with different LANG and LC_ALL settings).
> 
> And I'm not terribly good at guessing what kpathsea is doing here:
> 
>   kpathsea: Running mktexpk --mfmode / --bdpi 600 --mag 1+0/600 --dpi 600
> wasy10
>     * ACCESS DENIED:  mkdir:        /var/cache/fonts/pk/ljfour/public
> 
> Please attach a full build log to this bug report and reopen. The version of
> dev-libs/kpathsea and texlive installed would also be a good information.

dev-libs/kpathsea-6.2.0_p20140525
app-text/texlive-2014

Build log is above.

[Comment 6 Yarda 2016-02-28 10:56:58 UTC]

Created attachment 426876 [details, diff]
Proposed fix

The attached patch seems to resolve the problem for me.

[Comment 7 Matthias Maier 2016-02-28 16:00:29 UTC]

(In reply to Yarda from comment #4)
> [...], but it introduced some trouble, so adding it uncompressed now.

for relatively small logs it is fine to attach them uncompressed.

(In reply to Yarda from comment #6)
> Proposed fix
> 
> The attached patch seems to resolve the problem for me.

Ah! That's the right call!

Thanks a lot for the hint.


commit 93a409d4eb7f22d1bc4644b02a93af2bf3c017b0
Author: Matthias Maier <[e-mail]>
Date:   Sun Feb 28 09:52:42 2016 -0600

    app-doc/doxygen: Avoid a sandbox violation with (bug #564944)
    
    Export VARTEXFONTS="${T}/fonts" such that kpathsea does not try to write to
    /var/cache/fonts/pk/... during doc generation.
    
    Package-Manager: portage-2.2.26