Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 282001 - x11-libs/libxcb-1.4 sandbox violation
Summary: x11-libs/libxcb-1.4 sandbox violation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo X packagers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-08-19 09:21 UTC by Graham Murray
Modified: 2009-10-20 12:10 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Build log (x11-libs:libxcb-1.4:20090819-091029.log,363.60 KB, text/plain)
2009-08-19 09:59 UTC, Graham Murray
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Graham Murray 2009-08-19 09:21:57 UTC
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-22324.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: chmod
S: deny
P: /var/cache/fontconfig
A: /var/cache/fontconfig
R: /var/cache/fontconfig
C: dot xcb_8h__incl.dot -Tpng -o xcb_8h__incl.png 

F: chmod
S: deny
P: /var/cache/fontconfig
A: /var/cache/fontconfig
R: /var/cache/fontconfig
C: dot xcb_8h__incl.dot -Tpng -o xcb_8h__incl.png 
--------------------------------------------------------------------------------
 emerge --info
Portage 2.2_rc38 (default/linux/x86/10.0/desktop, gcc-4.4.1, glibc-2.10.1-r0, 2.6.31-rc6-00043-g894ef82 i686)
=================================================================
System uname: Linux-2.6.31-rc6-00043-g894ef82-i686-Intel-R-_Core-TM-2_Duo_CPU_E8200_@_2.66GHz-with-gentoo-2.0.1
Timestamp of tree: Wed, 19 Aug 2009 08:30:01 +0000
app-shells/bash:     4.0_p28
dev-java/java-config: 2.1.8-r1
dev-lang/python:     2.5.4-r2, 2.6.2-r1, 3.1.1
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.4-r2
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.4.3-r3
sys-apps/sandbox:    2.0
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2, 1.11
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86 ~x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=native -mtune=native -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /var/bind /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=native -mtune=native -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdeps y"
FEATURES="assume-digests buildsyspkg distlocks fixpackages parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://de-mirror.org/distro/gentoo/ http://gentoo.tiscali.nl/ http://mirror.ovh.net/gentoo-distfiles/ http://ftp.uni-erlangen.de/pub/mirrors/gentoo http://ftp.snt.utwente.nl/pub/os/linux/gentoo"
LANG="en_GB.UTF-8"
LC_ALL="en_GB.UTF-8"
LDFLAGS="-Wl,-O1"
LINGUAS="en_GB en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa apache2 bash-completion berkdb branding bzip2 cairo caps cdr cli cracklib crypt cups curl cvs cxx dbus doc dri dts dvd dvdr eds emacs emboss encode evo examples expat fam ffmpeg flac fortran gd gdbm geoip gif gnome gnome-keyring gnutls gpm gstreamer gtk gtkhtml hal htmlhandbook iconv idn imagemagick imlib ipv6 isdnlog java jpeg kde kdehiddenvisibility ldap libnotify libsamplerate logrotate lzo mad mikmod mmap mmx mng mono mp3 mp4 mpeg mudflap ncurses nls nptl nptlonly nsplugin ogg opengl openmp pam pcre pdf perl png postgres ppds pppd pulseaudio python qt3support qt4 quicktime readline reflection samba sdl session speex spell spl sqlite sqlite3 sse sse2 ssl startup-notification subversion svg sysfs tcl tcpd theora threads tiff tk truetype unicode usb vim-syntax vorbis win32codecs x264 x86 xattr xcb xcomposite xml xorg xulrunner xv xvid zlib" ALSA_CARDS="intel-hda" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="worker" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB en" USERLAND="GNU" VIDEO_CARDS="vesa fbdev nv"
Unset:  CPPFLAGS, CTARGET, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Justin Lecher (RETIRED) gentoo-dev 2009-08-19 09:25:25 UTC
please attach complete build.log
Comment 2 Graham Murray 2009-08-19 09:59:04 UTC
Created attachment 201694 [details]
Build log

Build log as requested
Comment 3 Steffen Hau 2009-08-19 14:57:08 UTC
Same issue here. According to bug #278221 and #282021 this could be resolved with an addpredict call for /var/cache/fontconfig in the ebuild. 
Comment 4 Rémi Cardona (RETIRED) gentoo-dev 2009-08-19 21:15:06 UTC
Sounds wrong to me, fc-cache is probably doing something braindead which should probably be fixed.

Any help figuring this out will be most appreciated.

Thanks
Comment 5 Steffen Hau 2009-08-19 21:51:53 UTC
I think this is not only ment for fc-cache (only in this particular case) but also related to fontconfig, especially libfontconfig. In bug #282021, gs is responsible for the access violation (gs is linked against libfontconfig.so) and is this case, dot is responsible for it (also linked against libfontconfig.so). fontconfig was updated on my computer on 08/17/09 to version 2.7.1, I don't know if earlier versions of fontconfig would raise the same issue. The appending of addpredict solved this issue for me with groff and libxcb as well. If you're not willing to add this workaround, one should forward this to the fontconfig maintainers. Perhaps they know what to.
Comment 6 Andrew A. Gill 2009-08-20 10:48:20 UTC
I just installed x11-libs/libxcb-1.4 (the package.mask referred to Bug 174434 with a date of 2009-August-19, and there was no mention of the current problem), and it didn't seem to have a sandbox violation.  My emerge --info, if you want:

Portage 2.1.6.13 (default/linux/amd64/2008.0, gcc-4.3.2, glibc-2.9_p20081201-r2, 2.6.30-gentoo-r4 x86_64)
=================================================================
System uname: Linux-2.6.30-gentoo-r4-x86_64-AMD_Athlon-tm-_64_Processor_3000+-with-gentoo-1.12.11.1
Timestamp of tree: Thu, 20 Aug 2009 10:00:01 +0000
distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7-r1, 2.1.8-r1
dev-lang/python:     2.5.4-r3, 2.6.2-r1
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.4
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -mtune=k8 -mmmx -msse3 -m3dnow -mfpmath=sse"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apach
e2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/sp
lash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rule
s.d"
CXXFLAGS="-O2 -pipe -mtune=k8 -mmmx -msse3 -m3dnow -mfpmath=sse"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache collision-protect confcache distcc distlocks fixpackages gegl metadata-transfer nostrip parallel-fetch pr
otect-owned sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --ti
meout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnownext X Xaw3d a52 aac aalib accessibility acl acpi aim alsa amd64 apm arts asf audiofile avi bash-completio
n bcmath berkdb bidi blas bonobo bzip2 cairo calendar caps cdparanoia cdr clamav cli cracklib crypt ctype cups curl curlwr
appers dbus devil dga dio directfb doc dri dts dv dvb dvd dvdr dvdread emacs emacs-w3 emboss encode esd examples exif expa
t fastcgi fbcon ffmpeg fftw firefox flac flash foomaticdb fortran freetype ftp gcj gd gdbm gegl geoip ggi gif ginac glut g
mp gnutls gphoto2 gpm gps graphviz gstreamer gtk gtk2 gtkhtml guile hal hardened hardenedphp howl icc iconv icq ieee1394 i
magemagick imlib ipv6 isdnlog jabber jack jadetex java javascript jbig jikes jpeg jpeg2k junit kerberos krb4 lapack lash l
cms leim lesstif libcaca libgda libwww live lm_sensors lua m17n-lib mad maildir mailwrapper matroska mbox mcal memlimit mh
ash mikmod milter mime ming mjpeg mmap mmx mmxext mng motif mp3 mpeg mpi msn mudflap mule multilib nas ncurses neXt netcdf
 networking nls nptl nptlonly nsplugin odbc offensive ogg oggvorbis openal opengl openmp osc oscar oss pam pcre pda pdf pe
rl php plotutils png portaudio posix ppds pppd python qt3 quicktime readline recode reflection ruby samba sasl scanner sdl
 session shorten skey slang slp sndfile snmp soap sockets socks5 source sox speex spell spl sse sse2 ssl startup-notificat
ion svg symlink sysfs sysvipc szip tcl tcltk tcpd tetex theora threads tidy tiff tk truetype unicode usb v4l vcd verbose v
ideos voodoo3 vorbis wmf wxwindows x264 xanim xine xinerama xinetd xml xmlrpc xmms xorg xosd xpm xprint xsl xv xvid yahoo 
zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda
-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy 
dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate 
route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_fi
le authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate d
ir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic neg
otiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mo
use" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" SANE_BACKENDS="gt6
8xx" USERLAND="GNU" VIDEO_CARDS="nvidia"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COM
PRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Comment 7 Steffen Hau 2009-08-20 12:06:58 UTC
What version of fontconfig is installed on your system? I'm using unstable x86, you're using stable amd64 according to your ACCEPT_KEYWORDS. >=media-libs/fontconfig-2.7 is keyworded for ~. So perhaps this is way you're not running into this issue.
Comment 8 Graham Murray 2009-08-20 13:09:59 UTC
(In reply to comment #7)
> What version of fontconfig is installed on your system? I'm using unstable x86,
> you're using stable amd64 according to your ACCEPT_KEYWORDS.
> >=media-libs/fontconfig-2.7 is keyworded for ~. So perhaps this is way you're
> not running into this issue.
> 

I am running ~x86 and fontconfig-2.7.1. The strange thing is is that I have 2 systems running ~x86 (both with fontconfig-2.7.1) and on one libxcb-1.4 installed with no problems (apart from the large number of packages which had to be rebuilt afterwards) and on the other I have the sandbox violation. Though the system on which it worked has a lot more font packages installed than the one on which it fails.
Comment 9 Andrew A. Gill 2009-08-20 15:02:44 UTC
I am running a mainly unstable amd64.  I usually go for the unstable package if it exists, but I like to keep my development tools stable (I was around for the gcc-2.96 debacle)

My fontconfig: media-libs/fontconfig-2.6.0-r2
Comment 10 Rémi Cardona (RETIRED) gentoo-dev 2009-08-24 08:27:09 UTC
fontconfig 2.7.1-r1 adds a system-wide addpredict for sandbox.

So that should be "fixed" now.

Thanks
Comment 11 Ruslan U. Zakirov 2009-10-20 10:26:51 UTC
Upgrade of fontconfig from 2.7.0 fixed this, but why libxcb's ebuilds are not updated to upgrade fontconfig automatically?
Comment 12 Rémi Cardona (RETIRED) gentoo-dev 2009-10-20 12:10:00 UTC
(In reply to comment #11)
> Upgrade of fontconfig from 2.7.0 fixed this, but why libxcb's ebuilds are not
> updated to upgrade fontconfig automatically?

Because we assume users will update their systems with "emerge -DuNa world" to get all the latest stable packages. Furthermore, libxcb doesn't dep on fontconfig directly.

Thanks