216009 2008-04-03 09:22 0000 media-libs/swfdec-0.6.2: Sandbox violations 2008-04-07 02:12:42 0000 1 1 1 Unclassified Gentoo Linux GNOME unspecified All Linux CLOSED TEST-REQUEST P2 normal --- 214260 1 askwar@digitalprojects.com gnome@gentoo.org ed@catmur.co.uk graham@gmurray.org.uk ian@abbott.org njdoyle+bugs@gmail.com pclouds@gentoo.org pocmatos@gmail.com portage@bigmichi1.dyndns.org askwar@digitalprojects.com 2008-04-03 09:22:32 0000 [ebuild N ] media-libs/swfdec-0.6.2 USE="alsa doc -ffmpeg gstreamer gtk mad -oss -pulseaudio" 0 kB --------------------------- ACCESS VIOLATION SUMMARY --------------------------- LOG FILE = "/var/log/sandbox/sandbox-11138.log" open_wr: /root/.gconf/.testing.writeability unlink: /root/.gconf/.testing.writeability open_wr: /root/.gconfd/saved_state open_wr: /root/.gconfd/saved_state open_wr: /root/.gstreamer-0.10/registry.i686.xml.tmpJ3238T open_wr: /root/.gstreamer-0.10/registry.i686.xml.tmpXD338T open_wr: /root/.gconfd/saved_state open_wr: /root/.gconfd/saved_state open_wr: /root/.gconfd/saved_state open_wr: /root/.gconfd/saved_state open_wr: /root/.gconfd/saved_state.tmp -------------------------------------------------------------------------------- --($:~)-- emerge --info Portage 2.1.4.4 (default-linux/x86/2007.0/desktop, gcc-4.2.3, glibc-2.7-r2, 2.6.24-tuxonice-r3.r08.mit-ide-mod_2 i686) ================================================================= System uname: 2.6.24-tuxonice-r3.r08.mit-ide-mod_2 i686 Genuine Intel(R) CPU T2400 @ 1.83GHz Timestamp of tree: Thu, 03 Apr 2008 06:15:01 +0000 distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.4 [enabled] app-shells/bash: 3.2_p33 dev-java/java-config: 1.3.7, 2.1.5 dev-lang/python: 2.5.1-r5 dev-python/pycrypto: 2.0.1-r6 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 1.12.12 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.61-r1 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.24 ACCEPT_KEYWORDS="x86 ~x86" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium-m -O2 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d" CXXFLAGS="-march=pentium-m -O2 -pipe -fomit-frame-pointer" DISTDIR="/Gentoo/Portage/distfiles" EMERGE_DEFAULT_OPTS="--alphabetical" FEATURES="buildpkg ccache collision-protect distlocks metadata-transfer parallel-fetch sandbox sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS=" http://ftp.heanet.ie/pub/gentoo/ http://ftp.gentoo.or.kr/ http://distfiles.gentoo.org/ http://www.ibiblio.org/pub/Linux/distributions/gentoo " LANG="de_CH.UTF-8" LINGUAS="de" MAKEOPTS="-j3" PKGDIR="/Gentoo/Portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/Gentoo/Portage/build" PORTDIR="/Gentoo/Portage/tree" PORTDIR_OVERLAY="/Gentoo/Portage/local-tree/misc" SYNC="rsync://winds06:10873/gentoo-portage" USE="X acpi alsa berkdb bluetooth cairo cdr cli cracklib crypt cups dbus dmi doc dri dvd dvdr dvdread encode fam firefox fortran gdbm gif gnome gnutls gpm gstreamer gtk hal iconv isdnlog jpeg kde kdeenablefinal kdehiddenvisibility keyring ldap libnotify mad midi mmx mp3 mpeg mudflap ncurses nls nptl nptlonly ogg opengl pam pcmcia pcre pdf perl png pppd python qt3 qt3support qt4 quicktime readline reflection sdl session spell spl sse sse2 ssl svg tcpd tiff truetype unicode vorbis wifi win32codecs x86 xine xinerama xml xorg xv zlib" ALSA_CARDS="hda-intel intel8x0 intel8x0m usb-audio usb-usx3y" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="worker" CAMERAS="ptp2 directory" ELIBC="glibc" INPUT_DEVICES="keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" USERLAND="GNU" VIDEO_CARDS="nv nvidia vga none" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS askwar@digitalprojects.com 2008-04-03 09:26:57 0000 Compiling swfdec with USE=-gstreamer "fixes" the problem. ian@abbott.org 2008-04-03 14:01:27 0000 Compiling swfdec with USE="-doc" also "fixes" the problem! Here's a snippet of build output on my system: creating swfdec-scan gtk-doc: Running scanner swfdec-scan ACCESS DENIED open_wr: /root/.gstreamer-0.10/registry.x86_64.xml.tmp3PKV8T ACCESS DENIED open_wr: /root/.gstreamer-0.10/registry.x86_64.xml.tmp1JIV8T touch scan-build.stamp make[2]: vfork: Invalid argument make[2]: Leaving directory `/var/tmp/portage/media-libs/swfdec-0.6.2/work/swfdec-0.6.2/doc' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/var/tmp/portage/media-libs/swfdec-0.6.2/work/swfdec-0.6.2' make: *** [all] Error 2 ian@abbott.org 2008-04-03 14:34:04 0000 I re-emerged gtk-doc (dev-util/gtk-doc-1.10-r1) and that allowed swfdec to build successfully with both the 'doc' and 'gstreamer' use flags. graham@gmurray.org.uk 2008-04-03 18:50:44 0000 (In reply to comment #3) > I re-emerged gtk-doc (dev-util/gtk-doc-1.10-r1) and that allowed swfdec to > build successfully with both the 'doc' and 'gstreamer' use flags. > re emerging gtk-doc had no effect for me. It still shows the same sandbox violations. ian@abbott.org 2008-04-04 22:12:19 0000 (In reply to comment #4) > (In reply to comment #3) > > I re-emerged gtk-doc (dev-util/gtk-doc-1.10-r1) and that allowed swfdec to > > build successfully with both the 'doc' and 'gstreamer' use flags. > > > > re emerging gtk-doc had no effect for me. It still shows the same sandbox > violations. Sorry, re-emerging gtk-doc tuned out to be a red herring! What actually allowed me to emerge swfdec successfully was running the following commands after it failed: cd /var/tmp/portage/media-libs/swfdec-0.6.2/work/swfdec-0.6.2/doc make clean make and then emerging swfdec again. This is not a valid fix as it leaves mess behind in the /root directory, and besides, it's easier to emerge with FEATURES="-sandbox" (also not a valid fix of course). pclouds@gentoo.org 2008-04-05 16:40:01 0000 swfdec-scan is linked to libgstreamer and libgconf. As a result, when these libraries are intialized, they try to access /root. Setting GST_REGISTRY (for example to /tmp/registry.xml) will avoid gstreamer access violation. gconf violation is more difficult though. pclouds@gentoo.org 2008-04-05 17:05:33 0000 Created an attachment (id=148760) swfdec-0.6.2.ebuild Please try the attached ebuild. The diff is diff --git a/media-libs/swfdec/swfdec-0.6.2.ebuild b/media-libs/swfdec/swfdec-0.6.2.ebuild index 54b3aaf..f5c028b 100644 --- a/media-libs/swfdec/swfdec-0.6.2.ebuild +++ b/media-libs/swfdec/swfdec-0.6.2.ebuild @@ -59,6 +59,12 @@ src_compile() { use alsa && myaudio="alsa" myconf=" --with-audio=$myaudio" + # bug #216009 + # avoid writing to /root/.gstreamer-0.10/registry.xml + export GST_REGISTRY="${T}"/registry.xml + # also avoid loading gconf plugins, which may write to /root/.gconfd + export GST_PLUGIN_SYSTEM_PATH="${T}" + econf \ $(use_enable doc gtk-doc) \ $(use_enable gstreamer) \ ian@abbott.org 2008-04-05 20:17:45 0000 I cleaned out the the files left behind in the /root directory from my earlier experiments (to start with a clean slate) and tried Nguyen Thai Ngoc Duy's patched ebuild. It worked for me! FTR, here are my USE flags for the ebuild: [ebuild R ] media-libs/swfdec-0.6.2 USE="alsa doc gstreamer gtk mad -ffmpeg -oss -pulseaudio" 0 kB Thanks for the fix! ed@catmur.co.uk 2008-04-06 12:47:38 0000 Please mark as blocking bug 214260. pclouds@gentoo.org 2008-04-06 13:00:08 0000 I'm waiting for at least one more user confirming this bug is fixed before I commit it. So please test. ed@catmur.co.uk 2008-04-06 13:59:55 0000 Confirm ebuild fixes bug here. pclouds@gentoo.org 2008-04-06 18:45:53 0000 InCVS pclouds@gentoo.org 2008-04-07 02:12:42 0000 *** Bug 216575 has been marked as a duplicate of this bug. *** 148760 2008-04-05 17:05 0000 swfdec-0.6.2.ebuild swfdec-0.6.2.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA4IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6IC92YXIvY3Zzcm9vdC9nZW50b28teDg2L21lZGlhLWxpYnMvc3dmZGVjL3N3ZmRlYy0wLjYu Mi5lYnVpbGQsdiAxLjEgMjAwOC8wMy8zMSAxMToyMzo1MSBsZWlvIEV4cCAkCgpFQVBJPTEKCmlu aGVyaXQgZXV0aWxzIHZlcnNpb25hdG9yIGNvbmZ1dGlscwoKTVlfUFY9JChnZXRfdmVyc2lvbl9j b21wb25lbnRfcmFuZ2UgMS0yKQpERVNDUklQVElPTj0iTWFjcm9tZWRpYSBGbGFzaCBkZWNvZGlu ZyBsaWJyYXJ5IgpIT01FUEFHRT0iaHR0cDovL3N3ZmRlYy5mcmVlZGVza3RvcC5vcmciClNSQ19V Ukk9Imh0dHA6Ly9zd2ZkZWMuZnJlZWRlc2t0b3Aub3JnL2Rvd25sb2FkLyR7UE59LyR7TVlfUFZ9 LyR7UH0udGFyLmd6IgoKTElDRU5TRT0iTEdQTC0yLjEiClNMT1Q9IjAiCktFWVdPUkRTPSJ+YW1k NjQgfnBwYyB+eDg2IgoKSVVTRT0iYWxzYSBkb2MgZmZtcGVnIGdzdHJlYW1lciBndGsgbWFkIG9z cyBwdWxzZWF1ZGlvIgoKUkRFUEVORD0iPj1kZXYtbGlicy9nbGliLTIuMTIKCT49ZGV2LWxpYnMv bGlib2lsLTAuMy4xCgk+PXgxMS1saWJzL3BhbmdvLTEuMTYuNAoJZ3RrPyAoCgkJPj14MTEtbGli cy9ndGsrLTIuOC4wCgkJbmV0LWxpYnMvbGlic291cDoyLjQKCQkpCgk+PXgxMS1saWJzL2NhaXJv LTEuMgoJZmZtcGVnPyAoID49bWVkaWEtdmlkZW8vZmZtcGVnLTAuNC45X3AyMDA3MDMzMCApCglt YWQ/ICggPj1tZWRpYS1saWJzL2xpYm1hZC0wLjE1LjFiICkKCWdzdHJlYW1lcj8gKAoJCT49bWVk aWEtbGlicy9nc3RyZWFtZXItMC4xMC4xMQoJCT49bWVkaWEtbGlicy9nc3QtcGx1Z2lucy1iYXNl LTAuMTAuMTUKCQkpCglhbHNhPyAoID49bWVkaWEtbGlicy9hbHNhLWxpYi0xLjAuMTIgKQoJcHVs c2VhdWRpbz8gKCBtZWRpYS1zb3VuZC9wdWxzZWF1ZGlvICkiCgpERVBFTkQ9IiR7UkRFUEVORH0K CWRldi11dGlsL3BrZ2NvbmZpZwoJZG9jPyAoID49ZGV2LXV0aWwvZ3RrLWRvYy0xLjYgKSIKCnBr Z19zZXR1cCgpIHsKCWlmIHVzZSAhZ3RrIDsgdGhlbgoJCWV3YXJuICJzd2ZkZWMgd2lsbCBiZSBi dWlsdCB3aXRob3V0IHN3ZmRlYy1ndGsgY29udmVuaWVuY2UiCgkJZXdhcm4gImxpYnJhcnksIHdo aWNoIGlzIG5lZWRlZCBieSBzd2ZkZWMtbW96aWxsYSBhbmQiCgkJZXdhcm4gInN3ZmRlYy1nbm9t ZS4gUGxlYXNlIGFkZCAnZ3RrJyB0byB5b3VyIFVTRSBmbGFncyIKCQlld2FybiAidW5sZXNzIHlv dSByZWFsbHkga25vdyB3aGF0IHlvdSBhcmUgZG9pbmcuIgoJZmkKCWNvbmZ1dGlsc191c2VfY29u ZmxpY3Qgb3NzIGFsc2EgcHVsc2VhdWRpbwp9CgpzcmNfY29tcGlsZSgpIHsKCWxvY2FsIG15Y29u ZgoJbG9jYWwgbXlhdWRpbwoKCSMtLXdpdGgtYXVkaW89W2F1dG8vYWxzYS9vc3Mvbm9uZV0KCW15 YXVkaW89Im5vbmUiCgl1c2Ugb3NzICYmIG15YXVkaW89Im9zcyIKCXVzZSBwdWxzZWF1ZGlvICYm IG15YXVkaW89InBhIgoJdXNlIGFsc2EgJiYgbXlhdWRpbz0iYWxzYSIKCW15Y29uZj0iIC0td2l0 aC1hdWRpbz0kbXlhdWRpbyIKCgkjIGJ1ZyAjMjE2MDA5CgkjIGF2b2lkIHdyaXRpbmcgdG8gL3Jv b3QvLmdzdHJlYW1lci0wLjEwL3JlZ2lzdHJ5LnhtbAoJZXhwb3J0IEdTVF9SRUdJU1RSWT0iJHtU fSIvcmVnaXN0cnkueG1sCgkjIGFsc28gYXZvaWQgbG9hZGluZyBnY29uZiBwbHVnaW5zLCB3aGlj aCBtYXkgd3JpdGUgdG8gL3Jvb3QvLmdjb25mZAoJZXhwb3J0IEdTVF9QTFVHSU5fU1lTVEVNX1BB VEg9IiR7VH0iCgoJZWNvbmYgXAoJCSQodXNlX2VuYWJsZSBkb2MgZ3RrLWRvYykgXAoJCSQodXNl X2VuYWJsZSBnc3RyZWFtZXIpIFwKCQkkKHVzZV9lbmFibGUgZmZtcGVnKSBcCgkJJCh1c2VfZW5h YmxlIG1hZCkgXAoJCSQodXNlX2VuYWJsZSBndGspIFwKCQkke215Y29uZn0gfHwgZGllICJjb25m aWd1cmUgZmFpbGVkIgoKCWVtYWtlIHx8IGRpZSAiZW1ha2UgZmFpbGVkIgp9CgpzcmNfaW5zdGFs bCgpIHsKCWVtYWtlIGluc3RhbGwgREVTVERJUj0iJHtEfSIgfHwgZGllICJlbWFrZSBpbnN0YWxs IGZhaWxlZCIKCWRvZG9jIEFVVEhPUlMgQ2hhbmdlTG9nIFJFQURNRQp9Cg==