Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 471358 - www-client/firefox-20.0.1[pgo] - sandbox violation in /dev/nvidiactl by .../work/mozilla-release/obj-x86_64-unknown-linux-gnu/dist/firefox/firefox-bin -no-remote -profile [...]
Summary: www-client/firefox-20.0.1[pgo] - sandbox violation in /dev/nvidiactl by .../w...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords: InOverlay
Depends on:
Blocks:
 
Reported: 2013-05-26 19:37 UTC by Andrew Savchenko
Modified: 2013-06-19 13:23 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge.info,8.47 KB, text/plain)
2013-05-26 19:41 UTC, Andrew Savchenko
Details
environment (environment,203.41 KB, text/plain)
2013-05-26 19:42 UTC, Andrew Savchenko
Details
build.log.xz (build.log.xz,460.15 KB, application/x-xz)
2013-05-26 19:43 UTC, Andrew Savchenko
Details
firefox-20.0.1.ebuild.patch (firefox-20.0.1.ebuild.patch,750 bytes, patch)
2013-05-26 22:32 UTC, Andrew Savchenko
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Savchenko gentoo-dev 2013-05-26 19:37:43 UTC
Hello,

firefox fails to build due to sandbox violation when using virtualx used for pgo:

 ^[[31;01m*^[[0m --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 ^[[31;01m*^[[0m LOG FILE: "/var/log/sandbox/sandbox-23114.log"
 ^[[31;01m*^[[0m
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /dev/nvidiactl
A: /dev/nvidiactl
R: /dev/nvidiactl
C: /var/tmp/portage/www-client/firefox-20.0.1/work/mozilla-release/obj-x86_64-unknown-linux-gnu/dist/firefox/firefox-bin -no-remote -profile /var/tmp/portage/www-client/firefox-20.0.1/work/mozilla-release/obj-x86_64-unknown-linux-gnu/_profile/pgo/pgoprofile/ http://localhost:8888/index.html
 ^[[31;01m*^[[0m --------------------------------------------------------------------------------

In fact this looks like virtualx.eclass bug for me: access to video acceleration device should be allowed if an appropriate GL interface is used.

As a workaround addpredict /dev/nvidiactl should fix this.
Comment 1 Andrew Savchenko gentoo-dev 2013-05-26 19:41:53 UTC
Created attachment 349298 [details]
emerge --info
Comment 2 Andrew Savchenko gentoo-dev 2013-05-26 19:42:09 UTC
Created attachment 349300 [details]
environment
Comment 3 Andrew Savchenko gentoo-dev 2013-05-26 19:43:04 UTC
Created attachment 349302 [details]
build.log.xz
Comment 4 Andrew Savchenko gentoo-dev 2013-05-26 22:32:57 UTC
Created attachment 349308 [details, diff]
firefox-20.0.1.ebuild.patch

This patch enables addpredict for all drivers, works fine for me.
Comment 5 Jory A. Pratt gentoo-dev 2013-05-27 15:58:19 UTC
pgo flag is masked we do not have man power to handle all bugs that are related to pgo build failures.
Comment 6 Andrew Savchenko gentoo-dev 2013-05-27 16:45:08 UTC
I understand this, but you have a tested patch here!

PGO itself may be buggy, but a lot of stuff in portage in buggy. On all three mine boxes (with different hardware and setups) it works quite fine and really helps the browser on not-so-powerful hardware.
Comment 7 Jory A. Pratt gentoo-dev 2013-05-28 03:46:38 UTC
I will port the patch to 21.0 in next few days and land it.
Comment 8 Andrew Savchenko gentoo-dev 2013-05-28 15:29:15 UTC
Thanks.
Comment 9 Jory A. Pratt gentoo-dev 2013-06-19 13:23:06 UTC
Fix has been added to fx-22.0_beta6 which is in the overlay, it will make its way to tree with final release of 22.0 thanks for reporting.