Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 379817 - app-office/libreoffice-3.4.3.1: sandbox access violation
Summary: app-office/libreoffice-3.4.3.1: sandbox access violation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Office Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-08-19 02:06 UTC by Egor Y. Egorov
Modified: 2011-08-20 07:37 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log.gz (build.log.gz,465.20 KB, text/plain)
2011-08-19 02:08 UTC, Egor Y. Egorov
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Egor Y. Egorov 2011-08-19 02:06:29 UTC
app-office/libreoffice-3.4.3.1 install fails with USE="branding cups dbus gstreamer gtk java kde ldap linguas_ru mysql nsplugin odk opengl python templates vba"

# emerge --info
Portage 2.2.0_alpha51 (default/linux/amd64/10.0/desktop, gcc-4.5.2, glibc-2.12.2-r0, 2.6.38.8-zen x86_64)
=================================================================
System uname: Linux-2.6.38.8-zen-x86_64-Pentium-R-_Dual-Core_CPU_E6300_@_2.80GHz-with-gentoo-2.0.3
Timestamp of tree: Thu, 18 Aug 2011 00:45:01 +0000
distcc 3.1 x86_64-pc-linux-gnu [disabled]
ccache version 2.4 [disabled]
app-shells/bash:          4.1_p9
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.1-r1, 3.1.3-r1
dev-util/ccache:          2.4-r9
dev-util/cmake:           2.8.4-r1
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.0.3
sys-apps/openrc:          0.8.3-r1
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:       2.20.1-r1
sys-devel/gcc:            4.4.5, 4.5.2
sys-devel/gcc-config:     1.4.1-r1
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82
sys-kernel/linux-headers: 2.6.39 (virtual/os-headers)
sys-libs/glibc:           2.12.2
Repositories: gentoo crossdev-overlay x11 rion java-overlay qting-edge kde mellon aidecoe systemd gamerlay-stable enlightenment-niifaq local NavSystem
Installed sets: @enlightenment-extended, @navsys-meta, @system
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=native"
DISTDIR="/mnt/localrep/distfiles"
FEATURES="assume-digests binpkg-logs buildpkg distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://mirror.yandex.ru/gentoo-distfiles/ ftp://xeon.gentoo.ru/"
LANG="ru_RU.UTF-8"
LC_ALL="ru_RU.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="ru"
MAKEOPTS="-j4"
PKGDIR="/home/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/package.skip"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/mnt/localrep/overlays/crossdev-overlay /mnt/localrep/overlays/layman/x11 /mnt/localrep/overlays/layman/rion /mnt/localrep/overlays/layman/java-overlay /mnt/localrep/overlays/layman/qting-edge /mnt/localrep/overlays/layman/kde /mnt/localrep/overlays/layman/mellon /mnt/localrep/overlays/layman/aidecoe /mnt/localrep/overlays/layman/systemd /mnt/localrep/overlays/layman/gamerlay /mnt/localrep/overlays/layman/enlightenment-niifaq /mnt/localrep/overlays/local /mnt/localrep/overlays/NavSystem"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3gp 7zip X a52 aac acl acpi ads alsa amd64 amr apache2 apm assistant bash-completion berkdb bineditor bittorrent bluetooth branding bzip2 cairo cdda cdr cleartype cli clucene cluster consolekit cracklib crypt cups cxx dbus debugger declarative dirac directfb djvu dri dts dvd dvdr dvi emboss emerald encode eps exif fam fbcon fbcondecor fbsplash festival ffmpeg fftw firefox flac fontconfig fortran freetds ftdi fts3 gallium gd gdbm gdu gif git gles glitz gnutls gpm gps gsm gstreamer handbook hdf5 iconv icq icu ipv6 ithreads jabber jingle jpeg kde kerberos lame laptop latex lcdfilter lcms ldap lib32 libnotify lm_sensors lzma mad maps matroska melt mercurial midi mikmod mmx mng modules mozilla mp3 mp4 mpeg mpi mssql mudflap multilib mysql ncurses networkmanager nls nptl nptlonly nspluginwrapper objc objc++ odbc odk ogg okteta opengl openmp pam pango pcre pdf perl plasma plymouth png policykit postgres ppds ppp pppd private-headers ps python python2 python3 qt qt3support qt4 qthelp qtscript quicktime radio rar rdesktop rdp rdpusb readline resolvconf romio samba sasl sdl secure-delete semantic-desktop session smb spell spice sql sqlite sqlite3 sse sse2 sse3 ssl ssse3 startup-notification subversion svg sysfs system-libvncserver systemd tcpd threads thunar thunderbird tiff tk tordns truetype type1 udev unicode usb userlocales v4l v4l2 video virtuoso vorbis webkit wicd winbind wxwidgets x264 xcb xcomposite xine xml xmpp xorg xulrunner xv xvid xvmc zeroconf zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" DRACUT_MODULES="plymouth" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="ru" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="vesa nouveau intel radeon i915 i965 r100 r200 r300 r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS
Comment 1 Egor Y. Egorov 2011-08-19 02:08:01 UTC
Created attachment 283845 [details]
build.log.gz
Comment 2 Attila Tóth 2011-08-19 10:37:42 UTC
Same here. The installer runs the real-world distro-install-clean-up utility. It fails trying to modify real-world SDK documentation permissions...
It may only happen with odk USE flag. I also have it enabled.

Relevant snippet of my build log:

***********************************************************
Successful packaging process!
***********************************************************
... creating log file log_OOO340_en-US.log 
... creating "follow me" info file follow_me_OOO340_en-US.log.
Fri Aug 19 07:44:50 2011 (01:11 min.)
Installer finished

Installation finished, you can now execute:
/usr/lib/libreoffice/program/soffice
./bin/distro-install-clean-up
Cleaning up ...
Fixing permissions...
ACCESS DENIED  fchmodat:     /usr/share/doc/libreoffice/sdk/index.html
chmod: changing permissions of `/usr/share/doc/libreoffice/sdk/index.html': Permission denied
ACCESS DENIED  fchmodat:     /usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html
chmod: changing permissions of `/usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html': Permission denied
ACCESS DENIED  fchmodat:     /usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html
chmod: changing permissions of `/usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html': Permission denied

--
Install /basis/program/java-set-classpath
./bin/distro-install-sdk
SDK installation clean up
./bin/distro-install-file-lists
Generating package file lists for Gentoo Foundation...
>>> Completed installing libreoffice-3.4.2.3 into /var/tmp/portage/app-office/libreoffice-3.4.2.3/image/

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-23018.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: fchmodat
S: deny
P: /usr/share/doc/libreoffice/sdk/index.html
A: /usr/share/doc/libreoffice/sdk/index.html
R: /usr/share/doc/libreoffice/sdk/index.html
C: chmod 644 /usr/share/doc/libreoffice/sdk/index.html 

F: fchmodat
S: deny
P: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html
A: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html
R: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html
C: chmod 644 /usr/share/doc/libreoffice/sdk/docs/common/ref/com/module-ix.html 

F: fchmodat
S: deny
P: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html
A: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html
R: /usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html
C: chmod 644 /usr/share/doc/libreoffice/sdk/docs/common/ref/com/sun/module-ix.html
Comment 3 Chí-Thanh Christopher Nguyễn gentoo-dev 2011-08-19 12:13:36 UTC
Try building with USE="-odk"
Comment 4 Attila Tóth 2011-08-19 12:52:58 UTC
(In reply to comment #3)
> Try building with USE="-odk"

The failed emerge can be finished manually with ebuild qmerge, since the install itself is OK otherwise.
The build takes approx 8-12 hours on my systems depending on the load, so I might try out building it -odk, but I cannot promise anything.
Comment 5 Attila Tóth 2011-08-19 12:54:30 UTC
(In reply to comment #3)
> Try building with USE="-odk"

What if the status of the bug would be changed from UNCONFIRMED?
Comment 6 Egor Y. Egorov 2011-08-19 16:44:48 UTC
So, if libreoffice already installed with USE=odk, USE=-odk emerge libreoffice still fails.
I suspect that emerge -C libreoffice && emerge libreoffice will end well.
Comment 7 Egor Y. Egorov 2011-08-19 19:16:12 UTC
Yes. 
# emerge -C libreoffice && USE=odk emerge libreoffice
completed without errors.

So the steps to reproduce the following
1. USE=odk emerge libreoffice
2. emerge libreoffice
Comment 8 Attila Tóth 2011-08-19 20:41:28 UTC
(In reply to comment #7)
> Yes. 
> # emerge -C libreoffice && USE=odk emerge libreoffice
> completed without errors.
> 
> So the steps to reproduce the following
> 1. USE=odk emerge libreoffice
> 2. emerge libreoffice

Since it tries to run a binary of an already installed instance. If it's not installed, the installer won't succeed in screwing up the emerge.
Comment 9 Tomáš Chvátal (RETIRED) gentoo-dev 2011-08-20 07:37:17 UTC
I added patches to all affected versions 3.4.3.1 and 3.4.2.3.