Bug 589198

Summary:	media-gfx/gimp-2.9.4 sandbox violation on /proc/mtrr by gegl-0.3
Product:	Gentoo Linux	Reporter:	dashmz
Component:	Current packages	Assignee:	Sebastian Pipping <sping>
Status:	RESOLVED FIXED
Severity:	normal	CC:	jstein, nrndda, pacho
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	emerge --info emerge --info build.log sandbox.log

Description dashmz 2016-07-20 06:40:58 UTC

When updating to gimp-2.9.4 the installation fails with:

/bin/sh: line 1:  8350 Segmentation fault      /usr/bin/gegl-0.3 ../../icons/Symbolic/12/gimp-quick-mask-off.png -o 12/gimp-quick-mask-off.png -- gegl:invert-gamma

gegl version: media-libs/gegl-0.3.8

Reproducible: Always

Comment 1 dashmz 2016-07-20 06:41:13 UTC

Created attachment 441174 [details]
emerge --info

Comment 2 Dmitry Derevyanko 2016-07-20 09:49:54 UTC

It's sandbox violation error by gegl-0.3. 

F: open_wr
S: deny
P: /proc/mtrr
A: /proc/mtrr
R: /proc/mtrr
C: /usr/bin/gegl-0.3 ../../icons/Symbolic/12/gimp-quick-mask-off.png -o 12/gimp-quick-mask-off.png -- gegl:invert-gamma

Comment 3 Dmitry Derevyanko 2016-07-20 09:51:30 UTC

Created attachment 441202 [details]
emerge --info

Comment 4 Dmitry Derevyanko 2016-07-20 09:53:25 UTC

Created attachment 441204 [details]
build.log

Comment 5 Dmitry Derevyanko 2016-07-20 09:55:26 UTC

Created attachment 441206 [details]
sandbox.log

Comment 6 Sebastian Pipping gentoo-dev

2016-07-20 17:10:04 UTC

Thanks for the report, fixed in git hopefully.  Else, please re-open.


commit 6fd9d728213574d0757df3a2f7bc4d2548434811
Author: Sebastian Pipping <sping@g.o>
Date:   Wed Jul 20 19:07:14 2016 +0200

    media-gfx/gimp: Graphics device access (bug #569738, #589198)
    
    Package-Manager: portage-2.2.28

 media-gfx/gimp/gimp-2.9.2-r2.ebuild | 3 +++
 media-gfx/gimp/gimp-2.9.4.ebuild    | 3 +++
 media-gfx/gimp/gimp-9999.ebuild     | 3 +++
 3 files changed, 9 insertions(+)

https://github.com/gentoo/gentoo/commit/6fd9d728213574d0757df3a2f7bc4d2548434811

Comment 7 Nick 2016-07-23 10:11:15 UTC

(In reply to Sebastian Pipping from comment #6)
>  media-gfx/gimp/gimp-2.9.2-r2.ebuild | 3 +++
>  media-gfx/gimp/gimp-2.9.4.ebuild    | 3 +++
>  media-gfx/gimp/gimp-9999.ebuild     | 3 +++
>  3 files changed, 9 insertions(+)
> 
> https://github.com/gentoo/gentoo/commit/
> 6fd9d728213574d0757df3a2f7bc4d2548434811

"addwrite /dev/ati/" has to be added, too for fglrx

Comment 8 Sebastian Pipping gentoo-dev

2016-07-23 12:47:50 UTC

(In reply to Nick from comment #7)
> "addwrite /dev/ati/" has to be added, too for fglrx

Done.


commit 8274d04eb2c0d454bfe05e40f1e814594de0f0b6
Author: Sebastian Pipping <sping@g.o>
Date:   Sat Jul 23 14:45:31 2016 +0200

    media-gfx/gimp: Graphics device access (bug #589198)
    
    Package-Manager: portage-2.2.28

 media-gfx/gimp/gimp-2.9.2-r2.ebuild | 1 +
 media-gfx/gimp/gimp-2.9.4.ebuild    | 1 +
 media-gfx/gimp/gimp-9999.ebuild     | 1 +
 3 files changed, 3 insertions(+)

https://github.com/gentoo/gentoo/commit/8274d04eb2c0d454bfe05e40f1e814594de0f0b6

Comment 9 Pacho Ramos gentoo-dev

2016-07-24 09:25:28 UTC

I don't know if it is the same for gimp... but, did you try to rely on addpredict instead of addwrite? At least in other similar cases I have seen for packages trying to touch /dev, that is usually enough :)

Comment 10 Sebastian Pipping gentoo-dev

2016-07-24 10:34:29 UTC

(In reply to Pacho Ramos from comment #9)
> I don't know if it is the same for gimp... but, did you try to rely on
> addpredict instead of addwrite? At least in other similar cases I have seen
> for packages trying to touch /dev, that is usually enough :)

For some of these, addwrite was needed afair, for some it may not.
I don't have any of these graphics cards, so it's hard for me to test.
If you do, please feel free to turn those into addpredict that you can verify.
It would actually be welcome.