Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 174267 - dev-db/mysql-5.0.26-r2 sanbox violations in /usr/$(get_libdir)
Summary: dev-db/mysql-5.0.26-r2 sanbox violations in /usr/$(get_libdir)
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: AMD64 Linux
: High normal (vote)
Assignee: Gentoo Linux MySQL bugs team
URL:
Whiteboard:
Keywords:
: 174649 (view as bug list)
Depends on:
Blocks:
 
Reported: 2007-04-12 11:20 UTC by Zak Kipling
Modified: 2007-04-24 13:34 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Zak Kipling 2007-04-12 11:20:14 UTC
I have a system that had a working install of mysql-5.0.26-r1, however it gave the following errors trying to install -r2:

cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.conf.d': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.conf.d': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.rc6': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.rc6': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/logrotate.mysql': No such file or directory
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient_r.so.15.0.0
rm: cannot remove `libmysqlclient_r.so.15.0.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient_r.so.15.0.0
ln: creating symbolic link `libmysqlclient_r.so.15.0.0': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient_r.so.15.0
rm: cannot remove `libmysqlclient_r.so.15.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient_r.so.15.0
ln: creating symbolic link `libmysqlclient_r.so.15.0': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient_r.so.15
rm: cannot remove `libmysqlclient_r.so.15': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient_r.so.15
ln: creating symbolic link `libmysqlclient_r.so.15': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient_r.so
rm: cannot remove `libmysqlclient_r.so': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient_r.so
ln: creating symbolic link `libmysqlclient_r.so': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient.so.15.0.0
rm: cannot remove `libmysqlclient.so.15.0.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient.so.15.0.0
ln: creating symbolic link `libmysqlclient.so.15.0.0': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient.so.15.0
rm: cannot remove `libmysqlclient.so.15.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient.so.15.0
ln: creating symbolic link `libmysqlclient.so.15.0': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient.so.15
rm: cannot remove `libmysqlclient.so.15': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient.so.15
ln: creating symbolic link `libmysqlclient.so.15': Permission denied
ACCESS DENIED  unlink:    /usr/lib64/libmysqlclient.so
rm: cannot remove `libmysqlclient.so': Permission denied
ACCESS DENIED  symlink:   /usr/lib64/libmysqlclient.so
ln: creating symbolic link `libmysqlclient.so': Permission denied


I then did "emerge -C dev-db/mysql" and reinstalled it clean, which succeeded but no symlinks were created in /usr/lib64 -- meaning that other installed software could no longer find libmysqlclient.so.15. Attempting to reinstall the new version of mysql now again produces the above sandbox (and missing files) errors.


Reproducible: Always

Steps to Reproduce:




emerge --info:

Portage 2.1.2.2 (default-linux/amd64/2006.1, gcc-4.1.1, glibc-2.3.6-r5, 2.6.19-gentoo-r1 x86_64)
=================================================================
System uname: 2.6.19-gentoo-r1 x86_64 AMD Opteron(tm) Processor 244
Gentoo Base System version 1.12.6
Timestamp of tree: Wed, 11 Apr 2007 06:50:01 +0000
distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.4 [disabled]
dev-java/java-config: 1.3.7, 2.0.30
dev-lang/python:     2.3.5-r3, 2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r6
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3, 2.17.50.0.14
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-g -O2 -pipe -march=k8 -mmmx -msse -msse2 -m3dnow"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/bind"CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/php/apache1-php5/ext-active/ /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-g -O2 -pipe -march=k8 -mmmx -msse -msse2 -m3dnow"
DISTDIR="/usr/portage/distfiles"
FEATURES="collision-protect distlocks metadata-transfer nostrip parallel-fetch sandbox sfperms strict userfetch userpriv usersandbox"GENTOO_MIRRORS="http://ftp.easynet.nl/mirror/gentoo http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://vlaai.snt.ipv6.utwente.nl/pub/os/linux/gentoo/ http://ftp.caliu.info/pub/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage /usr/portage/local/layman/toolchain /usr/portage/local/layman/liquidx"
SYNC="rsync://gentoo-rsync.cluster.local/gentoo-portage"
USE="X aalib acl amd64 apache2 avi berkdb bitmap-fonts browserplugin cgi cjk cli cracklib crypt ctype cups curl doc dri dv edl emacs emacs-w3 embedded faad fam fortran gdbm gif gmp gtk gtk2 gtkhtml hpn iconv idled imap imlib informatix innodb ipv6 isdnlog ithreads java jikes jimi libg++ libwww live lzo mbox midi mudflap multislot mysql ncurses network nls nptl nptlonly pam pcre pdf perl ppds pppd python qt readline reflection rtc session slang snmp soap spell spl ssl staticlibcrypto tcpd test tetex theora threads tiff truetype truetype-fonts type1-fonts unicode usb wildlsearch xml xml2 xorg xvid xvmc yaz zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="nv r128 vesa vga fbdev"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2007-04-15 08:25:36 UTC
*** Bug 174649 has been marked as a duplicate of this bug. ***
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-04-15 08:44:42 UTC
Can you reproduce this with 5.0.34?
Comment 3 Zak Kipling 2007-04-16 13:17:20 UTC
Yes, this happens just the same with the 5.0.34 ebuild in ~amd64.
Comment 4 ta2002 2007-04-23 10:00:35 UTC
Happens to me with (the now stable) 5.0.38:

make[2]: Entering directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
Making install in instance-manager
make[3]: Entering directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools/instance-manager'
make[4]: Entering directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools/instance-manager'
test -z "/usr/sbin" || /bin/mkdir -p "/var/tmp/portage/dev-db/mysql-5.0.38/image//usr/sbin"
  /bin/sh ../../libtool --preserve-dup-deps --mode=install /usr/bin/install -c 'mysqlmanager' '/var/tmp/portage/dev-db/mysql-5.0.38/image//usr/sbin/mysqlmanager'
/usr/bin/install -c mysqlmanager /var/tmp/portage/dev-db/mysql-5.0.38/image//usr/sbin/mysqlmanager
make[4]: Nothing to be done for `install-data-am'.
make[4]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools/instance-manager'
make[3]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools/instance-manager'
make[3]: Entering directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
make[4]: Entering directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
make[4]: Nothing to be done for `install-exec-am'.
make[4]: Nothing to be done for `install-data-am'.
make[4]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
make[3]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
make[2]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql/server-tools'
make[1]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql'
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.conf.d': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.conf.d': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.rc6': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.rc6': No such file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/logrotate.mysql': No such file or directory
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient_r.so.15.0.0
ln: creating symbolic link `libmysqlclient_r.so.15.0.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient_r.so.15.0
ln: creating symbolic link `libmysqlclient_r.so.15.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient_r.so.15
ln: creating symbolic link `libmysqlclient_r.so.15': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient_r.so
ln: creating symbolic link `libmysqlclient_r.so': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient.so.15.0.0
ln: creating symbolic link `libmysqlclient.so.15.0.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient.so.15.0
ln: creating symbolic link `libmysqlclient.so.15.0': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient.so.15
ln: creating symbolic link `libmysqlclient.so.15': Permission denied
ACCESS DENIED  symlink:   /usr/lib/libmysqlclient.so
ln: creating symbolic link `libmysqlclient.so': Permission denied
>>> Completed installing mysql-5.0.38 into /var/tmp/portage/dev-db/mysql-5.0.38/image/

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-dev-db_-_mysql-5.0.38-19648.log"

symlink:   /usr/lib/libmysqlclient_r.so.15.0.0
symlink:   /usr/lib/libmysqlclient_r.so.15.0
symlink:   /usr/lib/libmysqlclient_r.so.15
symlink:   /usr/lib/libmysqlclient_r.so
symlink:   /usr/lib/libmysqlclient.so.15.0.0
symlink:   /usr/lib/libmysqlclient.so.15.0
symlink:   /usr/lib/libmysqlclient.so.15
symlink:   /usr/lib/libmysqlclient.so
--------------------------------------------------------------------------------


# emerge -p --info
Portage 2.1.2.2 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0, 2.6.19-gentoo-r5 i686)
=================================================================
System uname: 2.6.19-gentoo-r5 i686 Intel(R) Pentium(R) 4 CPU 3.00GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Sun, 22 Apr 2007 08:30:10 +0000
dev-java/java-config: 1.3.7, 2.0.31-r5
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.15-r1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -mfpmath=sse"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -mfpmath=sse"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage /usr/portage/local/layman/sunrise"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac aalib acpi alsa arts audiofile berkdb bitmap-fonts bzip2 caps cdparanoia cdr cjk cpudetection cracklib crypt css cups dbus dga directfb dri dvd dvdr dvdread encode exif expat fam fbcon ffmpeg flac gcj ggi gif glibc-omitfp gmp gphoto2 gpm gstreamer hal iconv idea imagemagick imap imlib ipv6 javascript jbig joystick jpeg kde lcms libcaca libwww live lm_sensors mad matroska mbox memlimit midi mmx mmxext mng mp3 mpeg mysql nas ncurses network nls no-old-linux nodrm nptl nptlonly ogg opengl pcre pdf pdflib perl png qt3 quicktime readline real rtc samba scanner sdl silc sndfile speex spell sse sse2 ssl stream sysfs tcpd theora threads threadsafe tiff timidity truetype truetype-fonts type1-fonts unicode usb userlocales utf8 vcd vorbis win32codecs x86 xinerama xml xorg xv xvid zlib zrtp" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LINGUAS="en ru" USERLAND="GNU" VIDEO_CARDS="radeon"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-04-23 15:49:35 UTC
You have a bad copy of the mysql.eclass somewhere!
The below section was only in an ebuild older than January 7th.

make[1]: Leaving directory `/var/tmp/portage/dev-db/mysql-5.0.38/work/mysql'
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.conf.d': No such file or
directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.conf.d': No such
file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysql.rc6': No such file or
directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/mysqlmanager.rc6': No such
file or directory
cp: cannot stat `/usr/portage/dev-db/mysql/files/logrotate.mysql': No such file
or directory
Comment 6 Zak Kipling 2007-04-24 10:43:43 UTC
Still happens for me with the 5.0.38 ebuild and a recent mysql.eclass:

# $Header: /var/cvsroot/gentoo-x86/eclass/mysql.eclass,v 1.73 2007/04/15 13:00:51 robbat2 Exp $
Comment 7 Zak Kipling 2007-04-24 10:47:51 UTC
Scratch that. I had a long-forgotten overlay in /usr/local/portage/eclass/mysql.eclass to fix an earlier bug, and never removed it when that fix was added to portage.
Comment 8 Zak Kipling 2007-04-24 11:01:55 UTC
... and, having removed that, it now works just fine.
Sorry for the trouble!
Comment 9 ta2002 2007-04-24 13:34:26 UTC
(In reply to comment #5)
> You have a bad copy of the mysql.eclass somewhere!
> The below section was only in an ebuild older than January 7th.

Oops. I realized that as soon as you mentioned it.

My apologies as well.