Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 24215 - apache 2.0.46 sandbox violation
Summary: apache 2.0.46 sandbox violation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Web Application Packages Maintainers
URL:
Whiteboard:
Keywords:
: 30813 (view as bug list)
Depends on:
Blocks:
 
Reported: 2003-07-09 22:27 UTC by James Cloos
Modified: 2003-10-30 20:36 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
typescript of ebuilding apache 2.0.47 (APACHE.bz2,13.05 KB, application/octet-stream)
2003-07-20 20:32 UTC, James Cloos
Details

Note You need to log in before you can comment on or make changes to this bug.
Description James Cloos 2003-07-09 22:27:24 UTC
Upgrading from 2.0.45 to 2.0.46 gives me this:

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/tmp/sandbox-apache-2.0.46-14790.log"

link:      /dev/shm/sem.apr_autoconf
unlink:    /dev/shm/sem.9ADjFx
--------------------------------------------------------------------------------

right after linking ab(1).

ab is linked in httpd-2.0.46/support/Makefile.

It looks like only httpd-2.0.46/srclib/apr/configure references a
semaphore named apr_autoconf....
Comment 1 Martin Holzer (RETIRED) gentoo-dev 2003-07-15 23:49:44 UTC
please paste
#emerge info
Comment 2 James Cloos 2003-07-16 03:05:23 UTC
:; emerge info
Portage 2.0.48-r1 (default-x86-1.4, gcc-3.3, glibc-2.3.2-r1)
=================================================================
System uname: 2.6.0-test1-jhc1 i686 Intel(R) Pentium(R) III Mobile CPU      1000MHz
GENTOO_MIRRORS="http://gentoo.oregonstate.edu/"
CONFIG_PROTECT="/etc /var/qmail/control /usr/kde/2/share/config /usr/kde/3/share/config /var/bind /usr/X11R6/lib/X11/xkb /usr/kde/3.1/share/config /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/config"
CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d"
PORTDIR="/usr/portage"
DISTDIR="/home/portage/distfiles"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/home/portage"
PORTDIR_OVERLAY="/usr/local/portage"
USE="x86 3dnow apm mad gtkhtml arts esd ldap aalib acl acpi alsa apache2 avi berkdb bonobo cdr cjk crypt cups dvd encode ethereal evo flash gb gd gdbm gif gnome gphoto2 gpm gtk gtk2 guile imap imlib innodb ipv6 java jikes jpeg junit kde ksi lcms leim libg++ libgda libwww mikmod mmx motif mozilla mozsvg mpeg mule nas ncurses nls nptl objc oci8 oggvorbis opengl oss pam pcmcia pda pdflib perl pic plotutils png pnp postgres python qt quicktime radeon readline ruby sasl scanner sdl slang slp snmp spell sse ssl tcltk tcpd tetex tiff truetype usb wmf X xml xml2 xmms xv zlib -mysql -svga"
COMPILER="gcc3"
CHOST="i686-pc-linux-gnu"
CFLAGS="-march=pentium3 -mmmx -msse -O2 -pipe"
CXXFLAGS="-march=pentium3 -mmmx -msse -O2 -pipe"
ACCEPT_KEYWORDS="x86 ~x86"
MAKEOPTS=""
AUTOCLEAN="yes"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
FEATURES="sandbox buildpkg ccache keeptemp cvs"
Comment 3 Donny Davies (RETIRED) gentoo-dev 2003-07-20 19:57:16 UTC
link:      /dev/shm/sem.apr_autoconf

all i can think of is a possible autoconf bug?   check that
you have the latest up-to-date version of that....

i dont get this problem, never have, cant reproduce...
Comment 4 James Cloos 2003-07-20 20:32:17 UTC
Created attachment 14791 [details]
typescript of ebuilding apache 2.0.47
Comment 5 James Cloos 2003-07-20 20:38:09 UTC
autoconf is up to date:

:; emerge --search autoconf
[etc]
*  sys-devel/autoconf
      Latest version available: 2.57-r1
      Latest version installed: 2.57-r1


I've attached a typescript of ebuild help|setup|unpack|compile
of 2.0.47 if it helps.  (Or at least I tried to; I got a error
message from the cgi.  If it did not work, it is available at
http://cloos.sixbit.org/gentoo/bugs/APACHE.bz2
it is about 13kB bzip2(1)ed.)

Comment 6 James Cloos 2003-07-20 20:45:57 UTC
I forgot to add, the violation may not occur is /dev/shm is not mounted....

(I run 2.6, btw.)

Comment 7 Bret Towe 2003-08-24 20:43:54 UTC
ive got this problem also
on 2.0.47 im also running a 2.6 kernel
perhaps that is the cause of the problem
Comment 8 Donny Davies (RETIRED) gentoo-dev 2003-09-02 19:05:13 UTC
I dont actually use Linux-2.6.x, and I've not come across this problem myself...

Still hoping to find a find a fix for this...
Comment 9 James Cloos 2003-09-02 20:21:40 UTC
I'd forgotten about this one...

Anyway, I'm not sure what package it was, but I discovered sometime last month that one of the sandbox violations I was seeing was prevented by FEATURES=-cvs.

Ie, having both sandbox and cvs in FEATURES led to a violation, but only one or the other worked ok.

Might be relevant here....
Comment 10 Bret Towe 2003-09-02 20:36:41 UTC
hmm only features im using are sandbox and ccache
Comment 11 Donny Davies (RETIRED) gentoo-dev 2003-09-26 19:11:42 UTC
only happens on linux-2.6.x it seems.

breaks like in this report for one other developer, johnm.
he has the tempfs mount in fstab.

installs properly for me on 2.6.x, with the tempfs mount in fstab!

if this is still biting you, would you mind seeing if adding:
    addwrite "/dev/shm"
as the first line in src_compile() fixes the issue for now?

Comment 12 Bret Towe 2003-09-26 19:32:31 UTC
that is the fix ive been using to solve my problem
(sorry for not commenting as such but i didnt see it as a final solution)
tmpfs is also mounted here

Comment 13 Lourdes Jones 2003-10-13 18:39:19 UTC
2.0.47-r1 - kernel 2.6.0-test6-mm4 - /dev/shm mounted
addwrite "/dev/shm" is still needed to allow the emerge to complete.
Comment 14 Donny Davies (RETIRED) gentoo-dev 2003-10-16 19:29:37 UTC
*** Bug 30813 has been marked as a duplicate of this bug. ***
Comment 15 Narada Sage 2003-10-17 03:46:58 UTC
The same problem occurred to me (bug 30813).  The recommended hack in Additional
Comment #11 solved it.  Thanks.
Comment 16 Narada Sage 2003-10-30 17:20:06 UTC
Adding note to say that this problem persists on recent apache 2.0.48 version.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/tmp/sandbox-apache-2.0.48-19755.log"

link:      /dev/shm/sem.apr_autoconf
unlink:    /dev/shm/sem.kl14NF
--------------------------------------------------------------------------------
Comment 17 Donny Davies (RETIRED) gentoo-dev 2003-10-30 18:06:26 UTC
Thanks for that.  I really would prefer a better solution than the hack I've
offered in #11 though.  I dont run 2.6.x though, so am hoping somebody who
does can debug the GNU/autohell mess and figure out a nice patch.
Comment 18 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2003-10-30 20:36:46 UTC
fixed in CVS now.
in 2.0.48.