Bug 348728 – app-antivirus/clamav-0.96.5 + sys-libs/nss-db = sandbox violation through `id clamav' call in src_configure()

• Status: RESOLVED OBSOLETE
• Product: Gentoo Linux

[Description Oleg Gawriloff 2010-12-14 16:42:17 UTC]

emerge -va clamav ends with following:
config.status: clamav-config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands
configure: Summary of detected features follows
              OS          : linux-gnu
              pthreads    : yes (-lpthread)
configure: Summary of miscellaneous  features
              check       : no (auto)
              clamuko     : yes
              fdpassing   : 1
              IPv6        :  (disabled)
configure: Summary of optional tools
              clamdtop    :  (disabled)
              milter      : yes
configure: Summary of engine performance features)
              release mode: yes
              jit         : yes (auto)
              mempool     : yes
configure: Summary of engine detection features
              autoit_ea06 : yes
              bzip2       : ok
              zlib        : /usr
              unrar       : yes
configure: WARNING:
****** WARNING:
****** You are cross compiling to a different host or you are
****** linking to bugged system libraries or you have manually
****** disabled important configure checks.
****** Please be aware that this build may be badly broken.
****** DO NOT REPORT BUGS BASED ON THIS BUILD !!!

>>> Source configured.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-18208.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /var/db/group.db
A: /var/db/group.db
R: /var/db/group.db
C: id clamav
--------------------------------------------------------------------------------

>>> Failed to emerge app-antivirus/clamav-0.96.5, Log file:

>>>  '/var/tmp/portage/app-antivirus/clamav-0.96.5/temp/build.log'

 * GNU info directory index is up-to-date.


Reproducible: Always

[Comment 1 Oleg Gawriloff 2010-12-14 16:42:33 UTC]

Created attachment 257153 [details]
emerge --info ouput

[Comment 2 Oleg Gawriloff 2010-12-14 16:58:35 UTC]

Running /usr/sbin/remake-all-db fixed problem. Sorry for bother.

[Comment 3 Jeroen Roovers (RETIRED) 2010-12-14 17:34:14 UTC]

Please attach the entire build log to this bug report as a file.

[Comment 4 Jeroen Roovers (RETIRED) 2010-12-15 02:23:56 UTC]

OK, so an unprivileged `id' call caused the nss database (sys-libs/nss-db) to be updated, which sandbox caught. Maybe that's enough information.

[Comment 5 Thomas Raschbacher 2014-04-02 17:26:41 UTC]

long gone from tree.