Bug 384291 – sys-devel/gcc fails to build with +gcj and oracle-jdk-bin as system JDK due to sandbox violations on /proc/self/coredump_filter

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Serkan Kaba (RETIRED) 2011-09-24 08:45:48 UTC]

Similar to issue on bug #382465. I think we should add all the sandbox exceptions in java-pkg_setup-vm in java-utils-2 eclass, but not sure.

[Comment 1 Serkan Kaba (RETIRED) 2011-09-24 08:48:11 UTC]

Created attachment 287591 [details]
build.log.tar.gz

[Comment 2 SpanKY 2011-09-26 03:19:31 UTC]

not a bug in gcc

[Comment 3 Serkan Kaba (RETIRED) 2011-09-26 04:45:48 UTC]

(In reply to comment #2)
> not a bug in gcc

But it has to be worked around in gcc ebuild.

[Comment 4 Vlastimil Babka (Caster) (RETIRED) 2011-09-26 09:38:51 UTC]

I think the problem is due to this check:
"checking for jar... jar"

Bug 378319 is also related.

According to bug 196643, gcc should be fine with either jar or zip and zip was already added as a dep. Unless that didn't change, it would be easiest to prevent this check from happening at all.

[Comment 5 Serkan Kaba (RETIRED) 2011-09-26 12:48:20 UTC]

Created attachment 287771 [details, diff]
gcc-ebuild.patch

[Comment 6 Serkan Kaba (RETIRED) 2011-09-26 12:49:40 UTC]

I attached a pacth against 4.6.0 ebuild that forces internal jar script which uses zip. I'm not sure whether this should be fixed in the ebuild or the eclass though.

[Comment 7 Serkan Kaba (RETIRED) 2011-09-26 14:53:01 UTC]

Created attachment 287791 [details, diff]
toolchain.eclass.patch

Attaching a patch against toolchain.eclass as requested by Mike.

[Comment 8 SpanKY 2011-09-26 15:15:49 UTC]

(In reply to comment #3)

no it doesn't.  if running the jdk causes sandbox violations, then it needs a sandbox whitelisting just like the other jdk ebuilds install.  this isn't specific to gcc.

(In reply to comment #7)

we'll need to depend on zip/unzip when USE=gcj since the bundled jar script needs it.  i'll take care of this.

[Comment 9 SpanKY 2011-09-26 20:40:36 UTC]

as you said, we already have the ebuilds depend on zip/unzip, so i'll tweak the DEPEND stuff independently

http://sources.gentoo.org/eclass/toolchain.eclass?r1=1.470&r2=1.471

[Comment 10 Larry the Git Cow 2024-09-30 03:02:59 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f24f34cb062fce22d27296d989ec85a8e3cc106c

commit f24f34cb062fce22d27296d989ec85a8e3cc106c
Author:     Sam James <[e-mail]>
AuthorDate: 2024-09-30 02:59:13 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-09-30 02:59:13 +0000

    toolchain.eclass: drop obsolete Java workaround
    
    toolchain.eclass hasn't supported versions of GCC that included GCJ
    for a while (see ::toolchain and toolchain-legacy.eclass if interested
    in that), so drop an obsolete Java workaround we forgot to remove
    when cleaning up the rest.
    
    Bug: https://bugs.gentoo.org/384291
    Signed-off-by: Sam James <[e-mail]>

 eclass/toolchain.eclass | 4 ----
 1 file changed, 4 deletions(-)