Bugzilla Bug 179333

by updating fluxbox to fluxbox-1.0_rc3-r2 i get a sandbox violation while
creating the menu

...
...
chmod 755 startfluxbox
/bin/sh ../libtool --tag=CXX   --mode=link i686-pc-linux-gnu-g++  -O2
-march=athlon64 -pipe  -DSHAPE  -I/usr/include/freetype2     -lSM -lICE -o
fbsetroot fbsetroot.o ../src/FbRootWindow.o ../src/FbAtoms.o
../src/FbTk/libFbTk.a -lX11  -lXext -lXft -lXrender -lfontconfig -lfreetype -lz
-lX11   -lXrender -lXpm -L/usr/lib -lImlib2 -lfreetype -lz -L/usr/X11R6/lib
-lX11 -lXext -ldl -lm -lXrandr
mv -f .deps/fluxbox-update_configs.Tpo .deps/fluxbox-update_configs.Po
/bin/sh ../libtool --tag=CXX   --mode=link i686-pc-linux-gnu-g++  -O2
-march=athlon64 -pipe  -DSHAPE  -I/usr/include/freetype2     -lSM -lICE -o
fluxbox-update_configs fluxbox-update_configs.o ../src/defaults.o
../src/Resources.o ../src/FbTk/libFbTk.a -lX11  -lXext -lXft -lXrender
-lfontconfig -lfreetype -lz -lX11   -lXrender -lXpm -L/usr/lib -lImlib2
-lfreetype -lz -L/usr/X11R6/lib -lX11 -lXext -ldl -lm -lXrandr
mkdir .libs
i686-pc-linux-gnu-g++ -O2 -march=athlon64 -pipe -DSHAPE
-I/usr/include/freetype2 -o fbsetroot fbsetroot.o ../src/FbRootWindow.o
../src/FbAtoms.o  /usr/lib/libSM.so /usr/lib/libICE.so ../src/FbTk/libFbTk.a
/usr/lib/libXft.so /usr/lib/libfontconfig.so /usr/lib/libxml2.so
/usr/lib/libXpm.so -L/usr/lib /usr/lib/libImlib2.so -L/usr/X11R6/lib
/usr/lib/libfreetype.so -lz -lm /usr/lib/libXrandr.so /usr/lib/libXext.so
/usr/lib/libXrender.so /usr/lib/libX11.so /usr/lib/libXau.so
/usr/lib/libXdmcp.so -ldl
i686-pc-linux-gnu-g++ -O2 -march=athlon64 -pipe -DSHAPE
-I/usr/include/freetype2 -o fluxbox-update_configs fluxbox-update_configs.o
../src/defaults.o ../src/Resources.o  /usr/lib/libSM.so /usr/lib/libICE.so
../src/FbTk/libFbTk.a /usr/lib/libXft.so /usr/lib/libfontconfig.so
/usr/lib/libxml2.so /usr/lib/libXpm.so -L/usr/lib /usr/lib/libImlib2.so
-L/usr/X11R6/lib /usr/lib/libfreetype.so -lz -lm /usr/lib/libXrandr.so
/usr/lib/libXext.so /usr/lib/libXrender.so /usr/lib/libX11.so
/usr/lib/libXau.so /usr/lib/libXdmcp.so -ldl
make[3]: Leaving directory
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3/util'
make[2]: Leaving directory
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3/util'
make[2]: Entering directory
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3'
make[2]: Nothing to be done for `all-am'.
make[2]: Leaving directory
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3'
make[1]: Leaving directory
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3'
 * Creating a menu file (may take a while) ...
ACCESS DENIED  mkdir:     /root/.gnome2

(process:23297): libgnomevfs-WARNING **: Unable to create ~/.gnome2 directory:
Permission denied
convert: no pixels defined in cache
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/temp/home/.fluxbox/icons/secondlife-bin-9.xpm'.
convert: Memory allocation failed
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/temp/home/.fluxbox/icons/secondlife-bin-9.xpm'.
convert: no pixels defined in cache
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/temp/home/.fluxbox/icons/secondlife-bin-9.xpm'.
convert: Memory allocation failed
`/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/temp/home/.fluxbox/icons/secondlife-bin-9.xpm'.
Menu successfully generated:
/var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3/data/menu
Use fluxbox-generate_menu -h to read about all the latest features.            
                                                                               
                                            [ ok ]
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY
---------------------------
LOG FILE = "/var/log/sandbox/sandbox-x11-wm_-_fluxbox-1.0_rc3-r2-9348.log"

mkdir:     /root/.gnome2
--------------------------------------------------------------------------------


Reproducible: Always

Steps to Reproduce:
1. emerge -vau floxbox

I am unable to replicate this on my system, and I find this rather odd... we
explicitly set HOME to be in ${T}.

The output there seems to imply to me that it's libgnomevfs that's actually
trying to write something into ~/.gnome, and not the fluxbox-generate_menu
program.  Unfortunately I don't know a lot about libgnomevfs, or why it would
be used by the generate_menu program.

Could you please list the output of 'emerge --info', as well as any
fluxbox-specific USE flags you have enabled?

gnome-base/gnome-vfs
Installed versions:  2.16.3-r1(2)(06:54:41 PM 01/23/2007)
(-avahi -debug -doc -gnutls hal ipv6 samba ssl)



emerge -vp fluxbox
[ebuild     U ] x11-wm/fluxbox-1.0_rc3-r2 [1.0_rc3-r1]
USE="gnome imlib kde nls truetype -disableslit -disabletoolbar -xinerama" 0 kB



# emerge --info
Portage 2.1.2.7 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.5-r2,
2.6.21-suspend2-r4 i686)
=================================================================
System uname: 2.6.21-suspend2-r4 i686 Mobile AMD Athlon(tm) 64 Processor 3000+
Gentoo Base System release 1.12.10
Timestamp of tree: Wed, 23 May 2007 07:50:01 +0000
dev-java/java-config: 1.3.7, 2.0.32
dev-lang/python:     2.5.1-r2
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.23b
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon64 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config
/usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf
/etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/
/etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/splash /etc/terminfo
/etc/texmf/web2c"
CXXFLAGS="-O2 -march=athlon64 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms strict"
GENTOO_MIRRORS="http://pandemonium.tiscali.de/pub/gentoo/
ftp://pandemonium.tiscali.de/pub/gentoo/
http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/"
LANG="en_US.utf8"
LC_ALL="en_US.utf8"
LINGUAS="en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages
--filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/berkano
/usr/portage/local/layman/liquidx /usr/portage/local/layman/musicbrainz
/usr/portage/local/layman/pro-audio /usr/portage/local/layman/secondlife
/usr/portage/local/layman/sunrise /usr/portage/local/layman/vmware
/usr/portage/local/layman/voip /usr/portage/local/layman/zugaina
/usr/portage/local/maggu2810"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext 7zip X a52 aac acl acpi aiglx aim alsa amr apache2 arts asf
audacious audiofile bash-completion berkdb bitmap-fonts bluetooth bzip2 cairo
cdaudio cddb cdparanoia cdr cgi cjk cli cracklib crypt css cups curl
curlwrappers cvs dbus dhcp directfb divx dri dts dv dvd dvdnav dvdr dvdread dvi
encode exif fam fame fbcon fbdev fbsplash ffmpeg firefox flac flash fmod
fortran freetype freetype2 ftp fuse gd gdbm gif gimp gimpprint glitz glx gmedia
gnokii gnome gphoto2 gpm graphviz gs gtk gtk2 hal iconv icq idn ieee1394
imagemagick imlib ipv6 irda irmc isdnlog jabber java javamail javascript jpeg
jpeg2k kde kipi ladspa lame latex libg++ libsamplerate logitech-mouse logrotate
lzo mad matroska midi mikmod mime mjpeg mmx mmxext mono mp2 mp3 mp4 mpeg mpegts
mplayer msn mudflap musepack music musicbrainz ncurses net network newspr nls
no-seamonkey nptl nptlonly nsplugin ntfs ogg ogm openal opengl openmp osc oscar
pam pcm pcmcia pcre pdf perl pertty php plotutils png pnm ppds pppd python qt
qt3 qt3support qt4 quicktime rar readline real realmedia reflection reiserfs
samba scanner sdl session sharedmem sms sndfile sound soundtouch sox spell spl
sql srt sse sse2 ssl streamripper subversion svg sysfs tagwriting tcl tcltk
tcpd tetex theora threads threadsafe tidy tiff timidity tk transparency
truetype truetype-fonts type1-fonts udev unicode usb userlocales v4l v4l2 vcd
videos vidix vorbis wifi win32codecs wma wmf wmp wxwindows x264 x86 xcomposite
xine xml xorg xosd xpm xprint xscreensaver xv xvid yahoo zlib"
ALSA_CARDS="usb-audio via82xx via82xx-modem" ALSA_PCM_PLUGINS="adpcm alaw asym
copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat
linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc"
INPUT_DEVICES="keyboard mouse synaptics evdev" KERNEL="linux"
LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses
text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="radeon fglrx fbdev vesa"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_COMPRESS,
PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

I do not think that use-flags or compiler-flags will be the cause of the
violation

When I do a

====
rm -rf /root/.gnome2/

cd /var/tmp/portage/x11-wm/fluxbox-1.0_rc3-r2/work/fluxbox-1.0rc3

MENUFILENAME="data/menu" MENUTITLE="Fluxbox 1.0" CHECKINIT="no. go away."
HOME="../../temp/home" util/fluxbox-generate_menu -is -ds
====

the folder /root/.gnome2 will be created but contains no files.

Alright, I still can't replicate this, so I'll need your help (more), thanks!

We want the ebuild to run fluxbox-generate_menu with 'sh -x' so we can see
what's really happening just before this sandbox violation.

So please go into the ebuild for 1.0_rc3-r2, and on line 122 change this line:

        CHECKINIT="no. go away." HOME="${T}/home" \

To look like this instead:

        CHECKINIT="no. go away." HOME="${T}/home" sh -x \

Note, I just added 'sh -x ' just before the backslash at the end of the line.

Then you'll have to update your metadata and try to emerge fluxbox-1.0_rc3-r2
again, and paste the output here.  If you want to do this in the latest
fluxbox-1.0_rc3_p4944 ebuild instead, it's line 116 there.

If you have trouble with any of these steps, please contact me directly
(lack@gentoo.org) and we can hopefully get you sorted out and providing the
data I need to proceed.

I have done a "eix -sI fluxbox" and saw that i have the version 1.0_rc3-r493700
on my system. The update (from 1.0_rc3-r2 to this version) was done without the
sandbox violation.

That's great news!  Perhaps some of the fixes to the menu-generation code added
recently by upstream fixed this as a side-effect.

Thanks :)

I got this problem with fluxbox 1.0.0
I tried using the sh -x as suggested to get info and found the problem.
When "convert" form ImageMagick failes, it for some unknown reason want to make
~/.gnome2
In my case it happened with the following:

convert /usr/share/pixmaps/secondlife-bin.ico
/var/tmp/portage/x11-wm/fluxbox-1.0.0-r1/temp/home/.fluxbox/icons/secondlife-bin.xpm
convert: no pixels defined in cache `/usr/share/pixmaps/secondlife-bin.ico'.
convert: missing an image filename
`/var/tmp/portage/x11-wm/fluxbox-1.0.0-r1/temp/home/.fluxbox/icons/secondlife-bin.xpm'.

I tried the command alone (not as part of the ebuild) and got the above and a
/root/.gnome2 (did it as root).

I then temporarely moved the offending ico file and fluxbox installed with no
problems.

As a note I can open the ico file in gimp with no trouble. I dont know if
convert can handle this kind of files or there is an error in it.

(In reply to comment #7)
> I got this problem with fluxbox 1.0.0
> I tried using the sh -x as suggested to get info and found the problem.
> When "convert" form ImageMagick failes, it for some unknown reason want to make
> ~/.gnome2

Thanks for this!  Would you mind attaching the offending .ico file to this bug
please?

Also, what I find really troubling is that we set
HOME=/var/tmp/portage/x11-wm/fluxbox-1.0.0-r1/temp/home in the ebuild ->
Apparently either convert is doing it's own broken expansion of '~' and not
respecting this, or our new HOME isn't being exported to the convert process. 
I'll have to do some digging, but you've given me a great place to start. Thank
you!

Created an attachment (id=137060) [details]
Test ebuild for convert problem

I just made a little very simple ebuild to test and show the problem.

The tar-ball include the ebuild with manifest, offending ico file and so on.
Just ready to run :-)

If you try to emerge it it will success if /root/.gnome2 exist already
otherwise it will fail.
Hope that helps

Well, this certainly isn't a fluxbox bug - It's all about the way that gnomevfs
ignores the value of $HOME, which I have addressed in the new bug 200897

(In reply to comment #9)
> The tar-ball include the ebuild with manifest, offending ico file and so on.
> Just ready to run :-)

By the way, thanks for including the .ico file - Now I can replicate this on my
system.

I can confirm that x11-wm/fluxbox-1.0_rc3 only comiles after /root/.gnome2 was
manually created as an empty directory.

Would you who could replicate this mind testing to ensure that the changes in
gnome-vfs have actually truly fixed the problem?

Steps to test:
- Remove or rename /root/.gnome2
- Upgrade gnome-base/gnome-vfs
- Try emerging fluxbox again

Thanks!

fluxbox should *really* switch to using standard FDO desktop files instead of
similar homebrew scripts :/

# qlist -CIv gnome-vfs
gnome-base/gnome-vfs-2.20.1-r1

# ls -ld /root/.gnome*
ls: cannot access /root/.gnome*: No such file or directory

 * Creating a menu file (may take a while) ...
Menu successfully generated:
/var/tmp/portage/x11-wm/fluxbox-1.0.0-r1/work/fluxbox-1.0.0/data/menu
Use fluxbox-generate_menu -h to read about all the latest features.            
                                                        [ ok ]
>>> Source compiled.
>>> Test phase [not enabled]: x11-wm/fluxbox-1.0.0-r1

FIXED, closing.