177256 2007-05-05 22:27 0000 net-analyzer/rrdtool-1.2.23 sandbox violation 2007-05-12 13:34:23 0000 1 1 1 Unclassified Gentoo Linux Ebuilds unspecified AMD64 Linux RESOLVED FIXED P2 normal --- 1 aikawarazuni@gmail.com pva@gentoo.org andrei.ivanov@gmail.com corporate_gadfly@hotmail.com david.morgan@gmail.com howard_b_golden@yahoo.com infowolfe@gmail.com jslootbeek@gmail.com m.dreadlock@gmail.com nelchael@gentoo.org netmon@gentoo.org petrus69@gmx.de rose@rz.uni-potsdam.de voyageur@gentoo.org zeekec@mad.scientist.com aikawarazuni@gmail.com 2007-05-05 22:27:16 0000 Broke the sandbox, attempted to access illegally: open_wr: /usr/lib/ruby/1.8/x86_64-linux/RRD.so (symlink to /usr/lib64/ruby/1.8/x86_64-linux/RRD.so) Reproducible: Always aikawarazuni@gmail.com 2007-05-05 22:28:02 0000 Created an attachment (id=118298) ACCESS VIOLATION SUMMARY rose@rz.uni-potsdam.de 2007-05-06 06:34:37 0000 On i386 systems emerge rrdtool-1.2.23 fails with: make[4]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' Makefile:144: Commands were specified for file `RRD.so' at Makefile:114, Makefile:144: but `RRD.so' is now considered the same file as `/usr/lib/ruby/1.8/i686-linux/RRD.so'. Makefile:144: Commands for `/usr/lib/ruby/1.8/i686-linux/RRD.so' will be ignored in favor of those for `RRD.so'. make[4]: Circular /usr/lib/ruby/1.8/i686-linux/RRD.so <- /usr/lib/ruby/1.8/i686-linux/RRD.so dependency dropped. i686-pc-linux-gnu-gcc -I. -I. -I/usr/lib/ruby/1.8/i686-linux -I. -I../../src -fPIC -O2 -march=athlon-xp -fno-str ict-aliasing -fPIC -c main.c /bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/i686-linux /bin/install: cannot stat `RRD.so': No such file or directory make[4]: *** [/usr/lib/ruby/1.8/i686-linux/RRD.so] Error 1 aikawarazuni@gmail.com 2007-05-06 06:51:21 0000 (In reply to comment #2) Isn't this a different bug? nelchael@gentoo.org 2007-05-06 09:34:13 0000 It's related - difference is only in enabling ruby use flag: make[4]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' Makefile:144: Commands were specified for file `RRD.so' at Makefile:114, Makefile:144: but `RRD.so' is now considered the same file as `/usr/lib/ruby/1.8/i686-linux/RRD.so'. Makefile:144: Commands for `/usr/lib/ruby/1.8/i686-linux/RRD.so' will be ignored in favor of those for `RRD.so'. make[4]: Circular /usr/lib/ruby/1.8/i686-linux/RRD.so <- /usr/lib/ruby/1.8/i686-linux/RRD.so dependency dropped. i686-pc-linux-gnu-gcc -I. -I. -I/usr/lib/ruby/1.8/i686-linux -I. -I../../src -fPIC -march=pentium-m -O2 -pipe -fno-strict-aliasing -fPIC -c main.c /usr/bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/i686-linux /usr/bin/install: cannot stat `RRD.so': No such file or directory make[4]: *** [/usr/lib/ruby/1.8/i686-linux/RRD.so] Error 1 make[4]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' make[3]: *** [ruby] Error 2 make[3]: *** Waiting for unfinished jobs.... creating build/lib.linux-i686-2.5 i686-pc-linux-gnu-gcc -pthread -shared -march=pentium-m -O2 -pipe -fno-strict-aliasing -Wall -std=gnu99 -pedantic -Wshadow -Wpointer-arith -Wcast-align -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline -W -fPIC -DPIC -I/usr/include/libart-2.0 -I/usr/include/freetype2 build/temp.linux-i686-2.5/rrdtoolmodule.o -L../../src/.libs -L/usr/lib -R../../src/.libs -lrrd -lpython2.5 -o build/lib.linux-i686-2.5/rrdtoolmodule.so i686-pc-linux-gnu-gcc: unrecognized option '-R../../src/.libs' make[3]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23' make: *** [all] Error 2 !!! ERROR: net-analyzer/rrdtool-1.2.23 failed. Call stack: ebuild.sh, line 1614: Called dyn_compile ebuild.sh, line 971: Called qa_call 'src_compile' ebuild.sh, line 44: Called src_compile rrdtool-1.2.23.ebuild, line 64: Called die !!! make failed !!! If you need support, post the topmost build error, and the call stack if relevant. !!! A complete build log is located at '/var/tmp/portage/net-analyzer/rrdtool-1.2.23/temp/build.log'. (this is with -ruby) It looks like automagic dependency. andrei.ivanov@gmail.com 2007-05-06 19:18:04 0000 comment #4 happens to me too... willard.dawson@sungard.com 2007-05-07 02:03:55 0000 Is this error related, do you think? Checking if your kit is complete... Looks good Writing Makefile for RRDs cd perl-shared && make make[4]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/perl-shared' cp RRDs.pm blib/lib/RRDs.pm cp ntmake.pl blib/lib/ntmake.pl /usr/bin/perl5.8.8 /usr/lib/perl5/5.8.8/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.8.8/ExtUtils/typemap RRDs.xs > RRDs.xsc && mv RRDs.xsc RRDs.c i686-pc-linux-gnu-gcc -c -I../../src -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -fno-strict-aliasing -pipe -Wdeclaration-after-statement -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=i686 -O2 -pipe -DVERSION=\"1.2023\" -DXS_VERSION=\"1.2023\" -fPIC "-I/usr/lib/perl5/5.8.8/i686-linux-thread-multi/CORE" -DPERLPATCHLEVEL=8 RRDs.c Running Mkbootstrap for RRDs () chmod 644 RRDs.bs rm -f blib/arch/auto/RRDs/RRDs.so i686-pc-linux-gnu-gcc -shared -L/usr/local/lib RRDs.o -L../../src/.libs/ -Wl,--rpath -Wl,/usr/lib -lrrd -lm -o blib/arch/auto/RRDs/RRDs.so \ \ chmod 755 blib/arch/auto/RRDs/RRDs.so cp RRDs.bs blib/arch/auto/RRDs/RRDs.bs chmod 644 blib/arch/auto/RRDs/RRDs.bs Manifying blib/man3/RRDs.3pm make[4]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/perl-shared' cd ruby && /usr/bin/ruby extconf.rb && make EPREFIX=/usr sitedir=/usr/lib/ruby checking for rrd_create() in -lrrd... yes creating Makefile make[4]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' Makefile:144: Commands were specified for file `RRD.so' at Makefile:114, Makefile:144: but `RRD.so' is now considered the same file as `/usr/lib/ruby/1.8/i686-linux/RRD.so'. Makefile:144: Commands for `/usr/lib/ruby/1.8/i686-linux/RRD.so' will be ignored in favor of those for `RRD.so'. make[4]: Circular /usr/lib/ruby/1.8/i686-linux/RRD.so <- /usr/lib/ruby/1.8/i686-linux/RRD.so dependency dropped. i686-pc-linux-gnu-gcc -I. -I. -I/usr/lib/ruby/1.8/i686-linux -I. -I../../src -fPIC -march=i686 -O2 -pipe -fno-strict-aliasing -fPIC -c main.c /usr/bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/i686-linux /usr/bin/install: cannot stat `RRD.so': No such file or directory make[4]: *** [/usr/lib/ruby/1.8/i686-linux/RRD.so] Error 1 make[4]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' make[3]: *** [ruby] Error 2 make[3]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23' make: *** [all] Error 2 !!! ERROR: net-analyzer/rrdtool-1.2.23 failed. Call stack: ebuild.sh, line 1614: Called dyn_compile ebuild.sh, line 971: Called qa_call 'src_compile' ebuild.sh, line 44: Called src_compile rrdtool-1.2.23.ebuild, line 64: Called die !!! make failed !!! If you need support, post the topmost build error, and the call stack if relevant. !!! A complete build log is located at '/var/tmp/portage/net-analyzer/rrdtool-1.2.23/temp/build.log'. corporate_gadfly@hotmail.com 2007-05-07 14:22:43 0000 Created an attachment (id=118452) patch for disabling ruby bindings Simple patch for disabling ruby bindings all together. As stated, only disables ruby bindings, does not take care of the sandbox violation at all. Kind of like, hiding the dirt under the carpet. I am not interested in the ruby bindings, so I wanted to at least be able to install the ebuild. m.dreadlock@gmail.com 2007-05-08 14:04:43 0000 Same error as comment #1. (permission denied) Agree with comment #7, ruby is not enabled on my machine (so i prefer not being bothered with ruby stuff ;) Now it seems that ruby bindings was present in 1.2.19 but not enabled due missing .PHONY in bindings/Makefile (so ruby was not tried to be installed). If i go into /var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings and make install, everything seems to be ok: make[3]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' /usr/bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/x86_64-linux But i'm not aware of portage/sandbox rules/rights that might be the point here. petrus69@gmx.de 2007-05-10 11:08:47 0000 I've got that /bin/install error, too: make[4]: Entering directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' Makefile:144: Commands were specified for file `RRD.so' at Makefile:114, Makefile:144: but `RRD.so' is now considered the same file as `/usr/lib/ruby/1.8/i686-linux/RRD.so'. Makefile:144: Commands for `/usr/lib/ruby/1.8/i686-linux/RRD.so' will be ignored in favor of those for `RRD.so'. make[4]: Circular /usr/lib/ruby/1.8/i686-linux/RRD.so <- /usr/lib/ruby/1.8/i686-linux/RRD.so dependency dropped. i686-pc-linux-gnu-gcc -I. -I. -I/usr/lib/ruby/1.8/i686-linux -I. -I../../src -fPIC -mtune=athlon-xp -O3 -pipe -fPIC -c main.c running build running build_ext /bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/i686-linux make[4]: /bin/install: Command not found make[4]: *** [/usr/lib/ruby/1.8/i686-linux/RRD.so] Error 127 make[4]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' make[3]: *** [ruby] Error 2 make[3]: *** Waiting for unfinished jobs.... building 'rrdtoolmodule' extension creating build creating build/temp.linux-i686-2.4 i686-pc-linux-gnu-gcc -pthread -fno-strict-aliasing -DNDEBUG -mtune=athlon-xp -O3 -pipe -fno-strict-aliasing -Wall -std=gnu99 -pedantic -Wshadow -Wpointer-arith -Wcast-align -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline -W -fPIC -DPIC -I/usr/include/libart-2.0 -I/usr/include/freetype2 -fPIC -I../../src -I/usr/include/python2.4 -c rrdtoolmodule.c -o build/temp.linux-i686-2.4/rrdtoolmodule.o creating build/lib.linux-i686-2.4 i686-pc-linux-gnu-gcc -pthread -shared -mtune=athlon-xp -O3 -pipe -fno-strict-aliasing -Wall -std=gnu99 -pedantic -Wshadow -Wpointer-arith -Wcast-align -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline -W -fPIC -DPIC -I/usr/include/libart-2.0 -I/usr/include/freetype2 build/temp.linux-i686-2.4/rrdtoolmodule.o -L../../src/.libs -R../../src/.libs -lrrd -o build/lib.linux-i686-2.4/rrdtoolmodule.so i686-pc-linux-gnu-gcc: unrecognized option `-R../../src/.libs' make[3]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/var/tmp/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23' make: *** [all] Error 2 I think the errors are related, they both seem to come from wrong sandbox-related pathname arithmetics, maybe some variable is not set correctly. infowolfe@gmail.com 2007-05-10 18:21:23 0000 /usr/bin/install -c -m 0755 RRD.so /usr/lib/ruby/1.8/x86_64-linux ACCESS DENIED open_wr: /usr/lib/ruby/1.8/x86_64-linux/RRD.so /usr/bin/install: cannot create regular file `/usr/lib/ruby/1.8/x86_64-linux/RRD.so': Permission denied make[4]: *** [/usr/lib/ruby/1.8/x86_64-linux/RRD.so] Error 1 make[4]: Leaving directory `/dev/shm/portage/net-analyzer/rrdtool-1.2.23/work/rrdtool-1.2.23/bindings/ruby' --------------------------- ACCESS VIOLATION SUMMARY --------------------------- LOG FILE = "/var/log/sandbox/sandbox-net-analyzer_-_rrdtool-1.2.23-22319.log" open_wr: /usr/lib/ruby/1.8/x86_64-linux/RRD.so (symlink to /usr/lib64/ruby/1.8/x86_64-linux/RRD.so) -------------------------------------------------------------------------------- pva@gentoo.org 2007-05-12 13:34:23 0000 Fixed in rrdtool-1.2.23-r1. 118298 2007-05-05 22:28 0000 ACCESS VIOLATION SUMMARY sandbox-net-analyzer_-_rrdtool-1.2.23-812.log text/plain b3Blbl93cjogICAvdXNyL2xpYi9ydWJ5LzEuOC94ODZfNjQtbGludXgvUlJELnNvIChzeW1saW5r IHRvIC91c3IvbGliNjQvcnVieS8xLjgveDg2XzY0LWxpbnV4L1JSRC5zbykK 118452 2007-05-07 14:22 0000 patch for disabling ruby bindings rrdtool-1.2.23-disable-ruby.patch text/plain LS0tIHJyZHRvb2wtMS4yLjIzLmVidWlsZAkyMDA3LTA1LTA3IDEwOjEyOjUyLjI3NTAxOTY4NSAt MDQwMAorKysgcnJkdG9vbC0xLjIuMjMtcjEuZWJ1aWxkCTIwMDctMDUtMDcgMTA6MTM6MzguNTg1 OTQyNzQzIC0wNDAwCkBAIC0xMSw3ICsxMSw3IEBACiBMSUNFTlNFPSJHUEwtMiIKIFNMT1Q9IjAi CiBLRVlXT1JEUz0ifmFscGhhIH5hbWQ2NCB+YXJtIH5ocHBhIH5pYTY0IH5taXBzIH5wcGMgfnBw YzY0IH5zaCB+c3BhcmMgfng4NiIKLUlVU0U9ImRvYyBwZXJsIHB5dGhvbiBycmRjZ2kgdGNsIHVj bGliYyIKK0lVU0U9ImRvYyBwZXJsIHB5dGhvbiBycmRjZ2kgcnVieSB0Y2wgdWNsaWJjIgogCiBS REVQRU5EPSJ0Y2w/ICggZGV2LWxhbmcvdGNsICkKIAk+PXN5cy1saWJzL3psaWItMS4yLjEKQEAg LTIzLDYgKzIzLDcgQEAKIERFUEVORD0iJHtSREVQRU5EfQogCXBlcmw/ICggZGV2LWxhbmcvcGVy bCApCiAJcHl0aG9uPyAoIGRldi1sYW5nL3B5dGhvbiApCisJcnVieT8gKCBkZXYtbGFuZy9ydWJ5 ICkKIAlzeXMtYXBwcy9nYXdrIgogCiBUQ0xWRVI9IiIKQEAgLTQ5LDYgKzUwLDggQEAKIAogCXVz ZSBweXRob24gfHwgbXljb25mPSIke215Y29uZn0gLS1kaXNhYmxlLXB5dGhvbiIKIAorCXVzZSBy dWJ5IHx8IG15Y29uZj0iJHtteWNvbmZ9IC0tZGlzYWJsZS1ydWJ5IgorCiAJaWYgdXNlIHRjbCA7 IHRoZW4KIAkJbXljb25mPSIke215Y29uZn0gLS13aXRoLXRjbGxpYj0vdXNyLyQoZ2V0X2xpYmRp cikiCiAJZWxzZQo=