Bug 14492 – misuse of sandbox functions from /usr/lib/portage/bin/ebuild.sh

• Status: RESOLVED FIXED
• Product: Portage Development

[Description Jukka Salmi 2003-01-24 10:19:40 UTC]

various ebuilds (screen, vim-core, vi, gvim) call (or called in old versions)
sandbox functions add(read|write|deny|predict)() passing multiple arguments,
e.g. arguments containing shell wildcards.

example: gvim-6.1-r6.ebuild calls 'addwrite /dev/pty/*' - but addwrite() only
adds the first positional parameter to the variable SANDBOX_WRITE.

of course, those ebuilds should be fixed. but maybe it's a good idea to change
the sandbox functions to add ALL parameters to the variable they export. my
patch follows.

[Comment 1 Jukka Salmi 2003-01-24 10:21:19 UTC]

Created attachment 7601 [details, diff]
patch for sandbox functions in /usr/lib/portage/bin/ebuild.sh

changes sandbox functions to accept multiple arguments.

[Comment 2 SpanKY 2003-01-24 15:45:28 UTC]

the way to fix 'addwrite /dev/pty/*' would be to make it 'addwrite /dev/pty'

[Comment 3 Jukka Salmi 2003-01-25 10:05:44 UTC]

i filed bug reports for both ebuilds (gvim and vi) which called 'add...()
/dev/pty/*' [bug #14495 and #14496]. to change the sandox functions was meant as
an enhancement (see bug severity...). i don't know if that's useful for anybody
beside me ;-)

[Comment 4 Nicholas Jones (RETIRED) 2003-02-17 06:06:03 UTC]

bugs sent to respective packages