the problem is the access to the video card /dev/ati/card0 during the emake process. (see section Actual Results) what works for me is to allow write access to /dev/ati/card0 for the sandbox by editing the ebuild and just replace addpredict with addwrite. i know that this stands in conflict with the idea of a sandbox. may be this bug should be attached to sandbox too. Reproducible: Always Steps to Reproduce: 1. enable USE-flag introspection 2. # ebuild clutter-gst-1.0.0.ebuild compile Actual Results: gives repeated access violations for /dev/ati/card{1..15} note that the only real card /dev/ati/card0 is not listed here, which means it is found but not accepted by libGL. here are parts of the output: ... ACCESS DENIED remove: /dev/ati/card1 ACCESS DENIED __xmknod: /dev/ati/card1 ... libGL error: open uki failed (Operation not permitted) libGL error: reverting to (slow) indirect rendering ... F: remove S: deny P: /dev/ati/card1 A: /dev/ati/card1 R: /dev/ati/card1 C: /var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/.libs/ClutterGst-1.0 --introspect-dump=/var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/types.txt,/var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/dump.xml F: __xmknod S: deny P: /dev/ati/card1 A: /dev/ati/card1 R: /dev/ati/card1 C: /var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/.libs/ClutterGst-1.0 --introspect-dump=/var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/types.txt,/var/tmp/portage/media-libs/clutter-gst-1.3.8/work/clutter-gst-1.3.8/clutter-gst/tmp-introspect95yV_u/dump.xml Expected Results: compile without errors emerge --info: ------------------------------------------------------------------------------ Portage 2.1.9.46 (default/linux/amd64/10.0/desktop, gcc-4.5.2, libc-0-r0, 2.6.38-gentoo-r1 x86_64) ================================================================= System uname: Linux-2.6.38-gentoo-r1-x86_64-AMD_Phenom-tm-_II_X4_940_Processor-with-gentoo-2.0.2 Timestamp of tree: Thu, 21 Apr 2011 13:45:01 +0000 app-shells/bash: 4.2_p8 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.7.1-r1, 3.1.3-r1 dev-util/cmake: 2.8.4-r1 sys-apps/baselayout: 2.0.2 sys-apps/openrc: 0.8.2 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.10.3, 1.11.1-r1 sys-devel/binutils: 2.21 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82 sys-kernel/linux-headers: 2.6.38 virtual/os-headers: 0 ACCEPT_KEYWORDS="amd64 ~amd64 ~x86" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=amdfam10 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-march=amdfam10 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests binpkg-logs distlocks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://de-mirror.org/distro/gentoo/ http://gentoo.mneisen.org/ http://gentoo.wheel.sk/ http://gentoo.supp.name/ http://gentoo.mirror.pw.edu.pl/" LANG="C" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="de en" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/x11 /var/lib/layman/gnome" SYNC="rsync://rsync.de.gentoo.org/gentoo-portage" USE="#0-9 #a #b #c #d #e #f #g #h #i #j #k #l #m #n #o #p #q #r #s #t #u #v #w #x #z 3dnow X a52 aac ac acl acpi alsa amd64 archive autoipd avahi berkdb bluetooth branding brasero bzip2 cairo cdda cdr cleartype cli consolekit corefonts cracklib crypt cups cxx dbus device-mapper dhcpcd disk-partition dri dts dvd dvdr eap-tls emboss emerald encode exif fam ffmpeg firefox flac foomaticdb fortran fuse gallium gconf gcrypt gdbm gdu gif git gles gnome gnome-keyring gnuplot gpm gsm gstreamer gtk gtk3 hddtemp howl-compat hpcups iconv icu id3tag introspection ipv6 jpeg kdrive lame laptop lcms ldap libnotify libsamplerate libv4l libv4l2 llvm lm_sensors lzma mad mdnsresponder-compat mikmod mmx mng modules mono moonlight motif mp3 mp4 mpeg mppe-mpp mudflap multilib multitarget musicbrainz nautilus ncurses networking networkmanager nls nptl nptlonly nsplugin nspluginwrapper offensive ogg openal opengl openmp pam pango pcre pdf perl plotutils png policykit ppds pppd pulseaudio python qt3support qt4 rar readline samba scanner sdl secure-delete session shout sip skins smi snmp spell sqlite sse sse2 sse3 ssl ssse3 startup-notification subversion svg sysfs system-sqlite system-v8 taglib tcpd templates threads tiff truetype twolame udev udev-acl unicode unlock-notify upnp usb v4l v4l2 virtualbox vorbis wav wxwidgets x264 xcb xcomposite xml xorg xrender xv xvid zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de en" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="fglrx radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS --------------------------------------------------------------------------- i'm using gnome overlay
Created attachment 270797 [details, diff] patch with workaround which allows to merge allow the sandbox environment to really write to the videocards
*** This bug has been marked as a duplicate of bug 356283 ***
