200897 2007-12-01 01:03 0000 gnome-base/gnome-vfs does not respect $HOME 2008-01-16 22:43:14 0000 1 1 1 Unclassified Gentoo Linux GNOME unspecified All Linux RESOLVED FIXED P2 normal --- 179333 1 lack@gentoo.org gnome@gentoo.org lack@gentoo.org 2007-12-01 01:03:03 0000 This reported upstream as http://bugzilla.gnome.org/show_bug.cgi?id=463262 The short description: When gnome-vfs is looking for plugins, it tries to create ~/.gnome2/ - However, this does not respect $HOME, it gets the value directly from /etc/passwd It manifests as a sandbox violation in the fluxbox ebuild, - see bug 179333 for more details. The patch mentioned in the gnome.org bug from Debian looks like a reasonable solution to me. I will attach a copy of it to this bug. lack@gentoo.org 2007-12-01 01:06:55 0000 I can't figure out how to easily download the debian patch, here's a link to their syntax-highlighted SVN-viewer version: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gnome-vfs/debian/patches/24_home_dir_fakeroot.patch?op=file&rev=0&sc=0 lack@gentoo.org 2007-12-03 17:03:32 0000 Created an attachment (id=137628) debian-24_home_dir_fakeroot.patch Figured it out, attaching the patch now. lack@gentoo.org 2007-12-27 19:52:14 0000 Note: This is the cause of a sandbox violation in the fluxbox ebuild. I would appreciate a little feedback on whether or not this is even feasible for you gnome folks to fix, or if I should just try to work around it in my own ebuild? eva@gentoo.org 2008-01-16 22:43:14 0000 patch included, doesn't seem to brake anything (yet ;)) 137628 2007-12-03 17:03 0000 debian-24_home_dir_fakeroot.patch 24_home_dir_fakeroot.patch text/plain SW5kZXg6IGdub21lLXZmcy0yLjIwLjAvbGliZ25vbWV2ZnMvZ25vbWUtdmZzLWFwcGxpY2F0aW9u LXJlZ2lzdHJ5LmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQotLS0gZ25vbWUtdmZzLTIuMjAuMC5vcmlnL2xpYmdub21l dmZzL2dub21lLXZmcy1hcHBsaWNhdGlvbi1yZWdpc3RyeS5jCTIwMDctMDEtMDMgMDc6NTA6NDQu MDAwMDAwMDAwICswMTAwCisrKyBnbm9tZS12ZnMtMi4yMC4wL2xpYmdub21ldmZzL2dub21lLXZm cy1hcHBsaWNhdGlvbi1yZWdpc3RyeS5jCTIwMDctMTAtMTEgMTA6MTM6MTYuNDI5NTUxMTE1ICsw MjAwCkBAIC05NjUsNyArOTY1LDcgQEAKIAkJCQkJCSAgICAgICBOVUxMKTsKIAlnbm9tZV9yZWdp c3RyeV9kaXIuc3lzdGVtX2RpciA9IFRSVUU7CiAJCi0JdXNlcl9yZWdpc3RyeV9kaXIuZGlybmFt ZSA9IGdfYnVpbGRfZmlsZW5hbWUgKGdfZ2V0X2hvbWVfZGlyKCksCisJdXNlcl9yZWdpc3RyeV9k aXIuZGlybmFtZSA9IGdfYnVpbGRfZmlsZW5hbWUgKGdub21lX3Zmc19nZXRfaG9tZV9kaXIoKSwK IAkJCQkJCSAgICAgICIuZ25vbWUiLAogCQkJCQkJICAgICAgImFwcGxpY2F0aW9uLWluZm8iLAog CQkJCQkJICAgICAgTlVMTCk7CkluZGV4OiBnbm9tZS12ZnMtMi4yMC4wL2xpYmdub21ldmZzL2du b21lLXZmcy1pbml0LmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gZ25vbWUtdmZzLTIuMjAuMC5vcmlnL2xpYmdu b21ldmZzL2dub21lLXZmcy1pbml0LmMJMjAwNy0wMy0wNSAxMDowNTowNS4wMDAwMDAwMDAgKzAx MDAKKysrIGdub21lLXZmcy0yLjIwLjAvbGliZ25vbWV2ZnMvZ25vbWUtdmZzLWluaXQuYwkyMDA3 LTEwLTExIDEwOjEzOjE2LjQyOTU1MTExNSArMDIwMApAQCAtNTksMjkgKzU5LDYgQEAKIAogc3Rh dGljIEdQcml2YXRlICogcHJpdmF0ZV9pc19wcmltYXJ5X3RocmVhZDsKIAotc3RhdGljIGdib29s ZWFuCi1lbnN1cmVfZG90X2dub21lX2V4aXN0cyAodm9pZCkKLXsKLQlnYm9vbGVhbiByZXR2YWwg PSBUUlVFOwotCWdjaGFyICpkaXJuYW1lOwotCi0JZGlybmFtZSA9IGdfYnVpbGRfZmlsZW5hbWUg KGdfZ2V0X2hvbWVfZGlyICgpLCAiLmdub21lMiIsIE5VTEwpOwotCi0JaWYgKCFnX2ZpbGVfdGVz dCAoZGlybmFtZSwgR19GSUxFX1RFU1RfRVhJU1RTKSkgewotCQlpZiAoZ19ta2RpciAoZGlybmFt ZSwgU19JUldYVSkgIT0gMCkgewotCQkJZ193YXJuaW5nICgiVW5hYmxlIHRvIGNyZWF0ZSB+Ly5n bm9tZTIgZGlyZWN0b3J5OiAlcyIsCi0JCQkJICAgZ19zdHJlcnJvciAoZXJybm8pKTsKLQkJCXJl dHZhbCA9IEZBTFNFOwotCQl9Ci0JfSBlbHNlIGlmICghZ19maWxlX3Rlc3QgKGRpcm5hbWUsIEdf RklMRV9URVNUX0lTX0RJUikpIHsKLQkJZ193YXJuaW5nICgiRXJyb3I6IH4vLmdub21lMiBtdXN0 IGJlIGEgZGlyZWN0b3J5LiIpOwotCQlyZXR2YWwgPSBGQUxTRTsKLQl9Ci0KLQlnX2ZyZWUgKGRp cm5hbWUpOwotCXJldHVybiByZXR2YWw7Ci19Ci0KIHN0YXRpYyB2b2lkCiBnbm9tZV92ZnNfdGhy ZWFkX2luaXQgKHZvaWQpCiB7CkBAIC0xMTIsNyArODksOCBAQAogCWNoYXIgKmJvZ3VzX2FyZ3Zb Ml0gPSB7ICJkdW1teSIsIE5VTEwgfTsKIAkqLwogCQotCWlmICghZW5zdXJlX2RvdF9nbm9tZV9l eGlzdHMgKCkpIHsKKwkvKiBUaGUgZmlyc3QgY2FsbCBhbHNvIGNoZWNrcyB0aGF0IH4vLmdub21l MiBpcyB3cml0YWJsZS4gKi8KKwlpZiAoIWdub21lX3Zmc19nZXRfaG9tZV9kaXIgKCkpIHsKIAkJ cmV0dXJuIEZBTFNFOwogCX0KIApJbmRleDogZ25vbWUtdmZzLTIuMjAuMC9saWJnbm9tZXZmcy9n bm9tZS12ZnMtcHJpdmF0ZS11dGlscy5jCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIGdub21lLXZmcy0yLjIwLjAu b3JpZy9saWJnbm9tZXZmcy9nbm9tZS12ZnMtcHJpdmF0ZS11dGlscy5jCTIwMDctMDEtMDMgMDc6 NTA6NDQuMDAwMDAwMDAwICswMTAwCisrKyBnbm9tZS12ZnMtMi4yMC4wL2xpYmdub21ldmZzL2du b21lLXZmcy1wcml2YXRlLXV0aWxzLmMJMjAwNy0xMC0xMSAxMDoxNDo0OC44MTQ4MTU4NTEgKzAy MDAKQEAgLTEwODYsMyArMTA4Niw1NCBAQAogfQogI2VuZGlmCiAKK3N0YXRpYyBnYm9vbGVhbgor ZW5zdXJlX2RvdF9nbm9tZV9leGlzdHMgKGdjaGFyICpob21lX2RpcikKK3sKKwlnYm9vbGVhbiBy ZXR2YWwgPSBUUlVFOworCWdjaGFyICpkaXJuYW1lOworCisJZGlybmFtZSA9IGdfYnVpbGRfZmls ZW5hbWUgKGhvbWVfZGlyLCAiLmdub21lMiIsIE5VTEwpOworCisJaWYgKCFnX2ZpbGVfdGVzdCAo ZGlybmFtZSwgR19GSUxFX1RFU1RfRVhJU1RTKSkgeworCQlpZiAoZ19ta2RpciAoZGlybmFtZSwg U19JUldYVSkgIT0gMCkgeworCQkJZ193YXJuaW5nICgiVW5hYmxlIHRvIGNyZWF0ZSB+Ly5nbm9t ZTIgZGlyZWN0b3J5OiAlcyIsCisJCQkJICAgZ19zdHJlcnJvciAoZXJybm8pKTsKKwkJCXJldHZh bCA9IEZBTFNFOworCQl9CisJfSBlbHNlIGlmICghZ19maWxlX3Rlc3QgKGRpcm5hbWUsIEdfRklM RV9URVNUX0lTX0RJUikpIHsKKwkJZ193YXJuaW5nICgiRXJyb3I6IH4vLmdub21lMiBtdXN0IGJl IGEgZGlyZWN0b3J5LiIpOworCQlyZXR2YWwgPSBGQUxTRTsKKwl9CisKKwlnX2ZyZWUgKGRpcm5h bWUpOworCXJldHVybiByZXR2YWw7Cit9CisKKy8qKgorICogZ25vbWVfdmZzX2dldF9ob21lX2Rp cjoKKyAqCisgKiBJZiB+Ly5nbm9tZTIgaXMgd3JpdGFibGUsIHJldHVybiB0aGUgaG9tZSBkaXJl Y3RvcnkKKyAqIE90aGVyd2lzZSwgcmV0dXJuIHRoZSBjb250ZW50cyBvZiB0aGUgSE9NRSBlbnZp cm9ubWVudCB2YXJpYWJsZQorICoKKyAqIFJldHVybiB2YWx1ZTogaG9tZSBkaXJlY3RvcnkgaWYg c3VjY2Vzc2Z1bCwgTlVMTCBvdGhlcndpc2UuCisgKiBEbyBub3QgZnJlZSB0aGUgdmFsdWUgcmV0 dXJuZWQuCisgKi8KK2NvbnN0IGdjaGFyICoKK2dub21lX3Zmc19nZXRfaG9tZV9kaXIgKHZvaWQp Cit7CisJc3RhdGljIGdjaGFyICpob21lID0gTlVMTDsKKworCWlmIChob21lID09IE5VTEwpIHsK KwkJZ2NoYXIgKnRtcCA9IGdfZ2V0X2hvbWVfZGlyICgpOworCQlpZiAoZW5zdXJlX2RvdF9nbm9t ZV9leGlzdHMgKHRtcCkpIHsKKwkJCWhvbWUgPSBnX3N0cmR1cCAodG1wKTsKKwkJfSBlbHNlIHsK KwkJCWdjaGFyICp0bXAyID0gZ19nZXRlbnYgKCJIT01FIik7CisJCQlpZiAoIWdfc3RyX2VxdWFs ICh0bXAsIHRtcDIpICYmIGVuc3VyZV9kb3RfZ25vbWVfZXhpc3RzICh0bXAyKSkgeworCQkJCWhv bWUgPSBnX3N0cmR1cCAodG1wMik7CisJCQl9CisJCX0KKwl9CisKKwlyZXR1cm4gaG9tZTsKK30K SW5kZXg6IGdub21lLXZmcy0yLjIwLjAvbGliZ25vbWV2ZnMvZ25vbWUtdmZzLXByaXZhdGUtdXRp bHMuaAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Ci0tLSBnbm9tZS12ZnMtMi4yMC4wLm9yaWcvbGliZ25vbWV2ZnMvZ25v bWUtdmZzLXByaXZhdGUtdXRpbHMuaAkyMDA3LTAxLTAzIDA3OjUwOjQ0LjAwMDAwMDAwMCArMDEw MAorKysgZ25vbWUtdmZzLTIuMjAuMC9saWJnbm9tZXZmcy9nbm9tZS12ZnMtcHJpdmF0ZS11dGls cy5oCTIwMDctMTAtMTEgMTA6MTM6MTYuNDMzNTUxMzQyICswMjAwCkBAIC0xMjQsNiArMTI0LDgg QEAKIAogI2VuZGlmCiAKK2NvbnN0IGdjaGFyICAgKmdub21lX3Zmc19nZXRfaG9tZV9kaXIgICAg ICAgICAgICAgICAgICAgICAodm9pZCk7CisKIEdfRU5EX0RFQ0xTCiAKICNlbmRpZiAvKiBfR05P TUVfVkZTX1BSSVZBVEVfVVRJTFNfSCAqLwpJbmRleDogZ25vbWUtdmZzLTIuMjAuMC9tb2R1bGVz L2ZpbGUtbWV0aG9kLmMKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gZ25vbWUtdmZzLTIuMjAuMC5vcmlnL21vZHVs ZXMvZmlsZS1tZXRob2QuYwkyMDA3LTEwLTExIDEwOjEzOjE2LjM0NTU0NjMyNyArMDIwMAorKysg Z25vbWUtdmZzLTIuMjAuMC9tb2R1bGVzL2ZpbGUtbWV0aG9kLmMJMjAwNy0xMC0xMSAxMDoxMzox Ni40MzM1NTEzNDIgKzAyMDAKQEAgLTE1MzYsNyArMTUzNiw3IEBACiAJR0xpc3QgKnA7CiAJY2hh ciAqYnVmZmVyLCAqZXNjYXBlZF9wYXRoLCAqZXNjYXBlZF9tb3VudF9wb2ludDsKIAotCWNhY2hl X2ZpbGVfcGFyZW50ID0gYXBwZW5kX3RvX3BhdGggKGdfZ2V0X2hvbWVfZGlyICgpLCBUUkFTSF9F TlRSWV9DQUNIRV9QQVJFTlQpOworCWNhY2hlX2ZpbGVfcGFyZW50ID0gYXBwZW5kX3RvX3BhdGgg KGdub21lX3Zmc19nZXRfaG9tZV9kaXIgKCksIFRSQVNIX0VOVFJZX0NBQ0hFX1BBUkVOVCk7CiAJ Y2FjaGVfZmlsZV9wYXRoID0gYXBwZW5kX3RvX3BhdGggKGNhY2hlX2ZpbGVfcGFyZW50LCBUUkFT SF9FTlRSWV9DQUNIRV9OQU1FKTsKIAogCWlmIChta2Rpcl9yZWN1cnNpdmUgKGNhY2hlX2ZpbGVf cGFyZW50LCAwNzc3KSAhPSAwKSB7CkBAIC0xNjc1LDcgKzE2NzUsNyBAQAogCWNhY2hlZF90cmFz aF9kaXJlY3RvcmllcyA9IE5VTEw7CiAKIAkvKiByZWFkIGluIHRoZSBlbnRyaWVzIGZyb20gZGlz ayAqLwotCWNhY2hlX2ZpbGVfcGF0aCA9IGdfYnVpbGRfZmlsZW5hbWUgKGdfZ2V0X2hvbWVfZGly ICgpLAorCWNhY2hlX2ZpbGVfcGF0aCA9IGdfYnVpbGRfZmlsZW5hbWUgKGdub21lX3Zmc19nZXRf aG9tZV9kaXIgKCksCiAJCQkJCSAgICBUUkFTSF9FTlRSWV9DQUNIRV9QQVJFTlQsCiAJCQkJCSAg ICBUUkFTSF9FTlRSWV9DQUNIRV9OQU1FLAogCQkJCQkgICAgTlVMTCk7CkBAIC0xOTQ3LDcgKzE5 NDcsNyBAQAogCQlyZXR1cm4gR05PTUVfVkZTX0VSUk9SX0lOVkFMSURfVVJJOwogCiAJLyogV2Ug d2lsbCBuZWVkIHRoZSBVUkkgYW5kIHRoZSBzdGF0IHN0cnVjdHVyZSBmb3IgdGhlIGhvbWUgZGly ZWN0b3J5LiAqLwotCWhvbWVfZGlyZWN0b3J5ID0gZ19nZXRfaG9tZV9kaXIgKCk7CisJaG9tZV9k aXJlY3RvcnkgPSBnbm9tZV92ZnNfZ2V0X2hvbWVfZGlyICgpOwogCiAJaWYgKGdub21lX3Zmc19j b250ZXh0X2NoZWNrX2NhbmNlbGxhdGlvbiAoY29udGV4dCkpIHsKIAkJZ19mcmVlIChmdWxsX25h bWVfbmVhcik7Cg==