In hardened Gentoo, www-client/firefox-5.0-r2 installation is stopped by PaX. part of emerge log is listed here: ...... resource://gre/modules/nsFormAutoCompleteResult.jsm resource://gre/modules/tabview/utils.jsm resource://gre/modules/stylePanel.jsm resource://gre/modules/ISO8601DateUtils.jsm resource://gre/modules/PropertyPanel.jsm resource://gre/modules/openLocationLastURL.jsm resource://gre/modules/PerfMeasurement.jsm resource://gre/modules/XPCOMUtils.jsm resource://gre/modules/tabview/AllTabs.jsm resource://gre/modules/AddonUpdateChecker.jsm resource://gre/modules/Geometry.jsm resource://gre/modules/domplate.jsm /bin/sh: line 1: 18365 Killed /var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release/obj-x86_64-unknown-linux-gnu/browser/installer/../../dist/bin/run-mozilla.sh /var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release/obj-x86_64-unknown-linux-gnu/browser/installer/../../dist/bin/xpcshell -g "$PWD" -f /var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release/browser/installer/precompile_cache.js -e 'populate_startupcache("omni.jar", "startupCache.zip");' make[1]: *** [install] Error 137 make[1]: Leaving directory `/var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release/obj-x86_64-unknown-linux-gnu/browser/installer' make: *** [install] Error 2 emake failed * ERROR: www-client/firefox-5.0-r2 failed (install phase): * emake install failed * * Call stack: * ebuild.sh, line 56: Called src_install * environment, line 6429: Called die * The specific snippet of code: * MOZ_MAKE_FLAGS="${MAKEOPTS}" emake DESTDIR="${D}" install || die "emake install failed"; * * If you need support, post the output of 'emerge --info =www-client/firefox-5.0-r2', * the complete build log and the output of 'emerge -pqv =www-client/firefox-5.0-r2'. * The complete build log is located at '/var/log/portage/www-client:firefox-5.0-r2:20110706-191442.log'. * The ebuild environment file is located at '/var/tmp/portage/www-client/firefox-5.0-r2/temp/environment'. * S: '/var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release' Syslog gives out following PaX logs: Jul 7 04:04:42 moriramar kernel: PAX: execution attempt in: <anonymous mapping>, 2c295356000-2c295427000 2c295356000 Jul 7 04:04:42 moriramar kernel: PAX: terminating task: /var/tmp/portage/www-client/firefox-5.0-r2/work/mozilla-release/obj-x86_64-unknown-linux-gnu/dist/bin/xpcshell(xpcshell):18365, uid/euid: 0/0, PC: 000002c29535cd68, SP: 00000392725ce058 Jul 7 04:04:42 moriramar kernel: PAX: bytes at PC: 55 48 89 e5 53 89 31 48 83 ec 08 83 c6 02 39 d6 0f 87 0a 01 Jul 7 04:04:42 moriramar kernel: PAX: bytes at SP-8: 00000029a2968300 000002c293cef95c 00000392725ce7a0 fffffffffffffff1 00000029a1eeac90 000002c284d375e0 000002c284d38e00 0000000000000001 00000029a1eeac90 00000029a2975880 0000000000000000 Reproducible: Always Portage 2.1.10.4 (hardened/linux/amd64/desktop, gcc-4.5.2, glibc-2.13-r3, 2.6.38-hardened-r6 x86_64) ================================================================= System uname: Linux-2.6.38-hardened-r6-x86_64-AMD_Athlon-tm-_II_Neo_K345_Dual-Core_Processor-with-gentoo-2.0.3 Timestamp of tree: Wed, 06 Jul 2011 10:30:01 +0000 app-shells/bash: 4.2_p10 dev-lang/python: 2.7.2, 3.2 dev-util/cmake: 2.8.4-r1 dev-util/pkgconfig: 0.26 sys-apps/baselayout: 2.0.3 sys-apps/openrc: 0.8.3-r1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.11.1-r1 sys-devel/binutils: 2.21.1 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82-r1 sys-kernel/linux-headers: 2.6.38 (virtual/os-headers) sys-libs/glibc: 2.13-r3 Repositories: gentoo sunrise science gentoo-zh gentoo-haskell local ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/cache/portage/distfiles" EMERGE_DEFAULT_OPTS="--with-bdeps=y" FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://mirrors.163.com/gentoo" LANG="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="zh_TW zh" MAKEOPTS="-j2" PKGDIR="/var/cache/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/var/lib/ebuilds/portage" PORTDIR_OVERLAY="/var/lib/ebuilds/sunrise /var/lib/ebuilds/science /var/lib/ebuilds/gentoo-zh /var/lib/ebuilds/haskell /var/lib/ebuilds/local" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X a52 aac acl acpi amd64 avahi bash-completion berkdb bluetooth branding bzip2 cairo cdda cdr cjk cli consolekit cracklib crypt cups cxx dbus djvu dri dts dvd dvdr emboss encode exif fam ffmpeg firefox flac gconf gdbm gdu gif gnome gnome-keyring gpm gstreamer gtk hardened iconv ipv6 jpeg jpeg2k justify lame lcms ldap libnotify mad mmx mmxext mng modules mp3 mp4 mpeg msn mudflap multilib nautilus ncurses networkmanager nls nptl nptlonly nsplugin ogg opengl openmp pam pango pcre pdf perl png policykit ppds pppd pulseaudio python readline samba sdl session spell sqlite sse sse2 ssl startup-notification svg sysfs system-sqlite taglib tcpd threads tiff truetype udev unicode upnp urandom usb v4l2 vaapi vim-syntax vorbis webkit x264 xcb xcomposite xml xorg xulrunner xv xvid xvmc zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="zh_TW zh" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
@mozilla: it seems different error in bug 372947, so if is a duplicate feel free to mark as =)
Has already been fixed. The methodjit and pgo useflag have been masked for hardened profiles.
I am sorry that I might have to reopen this bug. Even pgo and methodjit is masked (In fact I haven't enabled them at first.), this still occurs. PaX again stopped xpcshell and the emerge failed. emerge -pv: [ebuild U ] www-client/firefox-5.0-r2 [4.0.1-r1] USE="alsa dbus ipc libnotify startup-notification system-sqlite webm -bindist -custom-cflags% -custom-optimization -debug (-methodjit) (-pgo) -wifi" LINGUAS="zh%* zh_TW -af -ak -ar -ast -be -bg -bn -bn_BD -bn_IN -br -bs -ca -cs -cy -da -de -el -en -en_GB -en_US -en_ZA -eo -es -es_AR -es_CL -es_ES -es_MX -et -eu -fa -fi -fr -fy -fy_NL -ga -ga_IE -gd -gl -gu -gu_IN -he -hi -hi_IN -hr -hu -hy -hy_AM -id -is -it -ja -kk -kn -ko -ku -lg -lt -lv -mai -mk -ml -mr -nb -nb_NO -nl -nn -nn_NO -nso -or -pa -pa_IN -pl -pt -pt_BR -pt_PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv -sv_SE -ta -ta_LK -te -th -tr -uk -vi -zh_CN -zu" 0 kB [1=>0]
(Install phase failed.) Some packages were updated, so I put new emerge info. Is there any other information that I should provide? New emerge --info: Portage 2.1.10.4 (hardened/linux/amd64/desktop, gcc-4.5.2, glibc-2.13-r3, 2.6.39-hardened-r5 x86_64) ================================================================= System uname: Linux-2.6.39-hardened-r5-x86_64-AMD_Athlon-tm-_II_Neo_K345_Dual-Core_Processor-with-gentoo-2.0.3 Timestamp of tree: Fri, 08 Jul 2011 14:30:01 +0000 app-shells/bash: 4.2_p10 dev-lang/python: 2.7.2, 3.2 dev-util/cmake: 2.8.4-r1 dev-util/pkgconfig: 0.26 sys-apps/baselayout: 2.0.3 sys-apps/openrc: 0.8.3-r1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.11.1-r1 sys-devel/binutils: 2.21.1 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82-r1 sys-kernel/linux-headers: 2.6.38 (virtual/os-headers) sys-libs/glibc: 2.13-r3 Repositories: gentoo sunrise science gentoo-zh gentoo-haskell local ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/cache/portage/distfiles" EMERGE_DEFAULT_OPTS="--with-bdeps=y" FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://mirrors.163.com/gentoo" LANG="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="zh_TW zh" MAKEOPTS="-j2" PKGDIR="/var/cache/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/var/lib/ebuilds/portage" PORTDIR_OVERLAY="/var/lib/ebuilds/sunrise /var/lib/ebuilds/science /var/lib/ebuilds/gentoo-zh /var/lib/ebuilds/haskell /var/lib/ebuilds/local" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X a52 aac acl acpi amd64 avahi bash-completion berkdb bluetooth branding bzip2 cairo cdda cdr cjk cli consolekit cracklib crypt cups cxx dbus djvu dri dts dvd dvdr emboss encode exif fam ffmpeg firefox flac gconf gdbm gdu gif gnome gnome-keyring gpm gstreamer gtk hardened iconv ipv6 jpeg jpeg2k justify lame lcms ldap libnotify mad mmx mmxext mng modules mp3 mp4 mpeg msn mudflap multilib nautilus ncurses networkmanager nls nptl nptlonly nsplugin ogg opengl openmp pam pango pcre pdf perl png policykit ppds pppd pulseaudio python readline samba sdl session spell sqlite sse sse2 ssl startup-notification svg sysfs system-sqlite taglib tcpd threads tiff truetype udev unicode upnp urandom usb v4l2 vaapi vim-syntax vorbis webkit x264 xcb xcomposite xml xorg xulrunner xv xvid xvmc zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="zh_TW zh" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
You must provide a build log, the only reason this should fail is if you are using a patch that is not provided by gentoo.
Created attachment 279511 [details] full build.log I am sorry that full build.log is not uploaded in time, since it reaches the maximum size limit of attachment here. The only local patches I have applied to portage packages is 4200_fbcondecor-0.9.6.patch (sys-kernel/hardened-sources), which is originally excluded by the ebuild. Local overlay is listed as below: $ ls /var/lib/ebuilds/local/* /var/lib/ebuilds/local/media-video: gnome-mplayer /var/lib/ebuilds/local/net-im: skype /var/lib/ebuilds/local/profiles: categories repo_name /var/lib/ebuilds/local/www-client: firefox /var/lib/ebuilds/local/x11-plugins: pidgin-gnome-keyring
firefox in local overlay is 4.0... i forgot to say that...
The problem is due to strict settings in hardened kernel. Using Gentoo Workstation level solves it. Closing. Sorry for wasting your time, and thank you for your help.
