Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 133357 - captive 1.1.7 sandbox violations
Summary: captive 1.1.7 sandbox violations
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Stefan Schweizer (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-05-15 01:27 UTC by genbug
Modified: 2006-07-18 23:50 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description genbug 2006-05-15 01:27:54 UTC
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-sys-fs_-_captive-1.1.7-r1-14901.log"

chmod:     /root/.gnome2_private
chmod:     /root/.gnome2_private
--------------------------------------------------------------------------------

posted this to forums a while back, no responce , no fix , so let's make it official.
Comment 1 Sebastian Stammler 2006-06-01 06:46:46 UTC
exactly the same problem here, also posted in forum, but the given workaround didn't solve the problem (for me). have a look http://forums.gentoo.org/viewtopic-t-466896.html

suggested workaround: FEATURES="-sandbox" emerge captive
results in: 
----------
yuna1 root # mount -t captive-ntfs /dev/hda2 /mnt/win
/usr/libexec/captive-sandbox-server: lstat/stat("/") of chroot path component has UID 500 !=0!
Aborting!
 
Captive-ERROR **: Error connecting to the sandbox server (failed "data_size>=1"). Try running by hand: /usr/libexec/captive-sandbox-server
aborting...
----------
when running captive-sandbox-server by hand, the first message error shows up(UID 500!=0!). 

i played a little bit with strace to find out, to which path this error refers...without success.

any help, solutions?
Comment 2 Stefan Schweizer (RETIRED) gentoo-dev 2006-06-01 07:50:47 UTC
I added an addwrite as advertised in the gnome2 eclass for the sandbox bug.
Sebastian Stammler, can you please report your bug upstream to the captive mailing list if it still ahppens with the addwrite?

--- /usr/portage/sys-fs/captive/captive-1.1.7-r1.ebuild 2006-06-01 16:38:28.000000000 +0200
+++ captive-1.1.7-r1.ebuild     2006-04-05 14:46:06.000000000 +0200
@@ -44,6 +44,9 @@
 }

 src_compile() {
+       # Do not remove the addwrite. bug #128289, bug #133357
+       addwrite "${ROOT}/root/.gnome2"
+
        # disable some tests to save time ;)
        econf $(use_enable debug bug-replay) \
                $(use_with readline) \
Comment 3 Sebastian Stammler 2006-06-01 08:27:16 UTC
ok, i patched my captive ebuild, as you suggested... now i get new sandbox access violation errors, when i run 'emerge captive' ( i DON'T use FEATURES="-sandbox" now!):

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-sys-fs_-_captive-1.1.7-r1-29120.log"
 
open_wr:   /root/.gconf/.testing.writeability
unlink:    /root/.gconf/.testing.writeability
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state.tmp
--------------------------------------------------------------------------------
Comment 4 Stefan Schweizer (RETIRED) gentoo-dev 2006-06-01 08:54:38 UTC
if you use

addwrite /root/.gnome2_private /root/.gnome2 /root/.gconfd /root/.gconf

does it work better then?
Comment 5 Sebastian Stammler 2006-06-01 09:12:04 UTC
hmm if i would know the exact meaning of the addwrite command, perhaps i would have tried this on my own... it isn't explained in the gentoo ebuild developer's handbook. ok, i guess, it has something to do with sandbox, to add write permission to the given files/folders...
back to the problem: with that, i can now emerge the whole thing without disabling sandbox!
but i still get the same problem as mentioned berfore, when i try to mount my ntfs partition... "/usr/libexec/captive-sandbox-server: lstat/stat("/") of chroot path component has UID 500 !=0!"
but that's another problem, has nothing to do with this bug, so thank you! now i start solving this problem ;)

cya
Comment 6 Sebastian Stammler 2006-06-01 09:16:26 UTC
I'M SORRY, my fault... for ANY REASON my / dir is really owned by userid 500 (my default user). LOL -_-
now everything works fine!
Comment 7 Jedi 2006-06-07 04:24:50 UTC
I still get the errors:

open_wr:   /root/.gconf/.testing.writeability
unlink:    /root/.gconf/.testing.writeability
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state
open_wr:   /root/.gconfd/saved_state

Comment 8 Stefan Schweizer (RETIRED) gentoo-dev 2006-06-07 05:16:50 UTC
that cant be, I added "addwrite" for all those. IN what ebuild phase do you get the errors? Can you attach the full build log?

emerge captive > log
Comment 9 Stefan Schweizer (RETIRED) gentoo-dev 2006-07-18 23:50:30 UTC
this is resolved - if not I neeed more info.