I'm using Gentoo Linux installed into Parallels Desktop 9 for Mac (build: 9.0.24172). I'm trying to emerge firefox, but it fails with a sandbox violation error (attached). It seems that firefox build system attempts to access /proc/driver/prl_vtg which is a driver file for Parallels Tools installed into Gentoo system. My assumption is that /proc/driver/prl_vtg belongs to 'prlvideo' x11 driver (not available from Gentoo portage). I've tried to build both stable (24.0) and testing (27.0) firefox versions, both of them fail with the same error. Both build attempts were issued from gnome-terminal running in X11 session. I'll try to build firefox from Linux console and see whether it helps.
Created attachment 369968 [details] emerge --info
Created attachment 369970 [details] sandbox.log
Created attachment 369972 [details] build.log
Comment on attachment 369972 [details] build.log Please attach the entire build log to this bug report.
The build.log file is too large, so it's not allowed to attach it here. Any suggestions on where to put the file?
Yesterday I've tried to build firefox from Linux console, and it still failed with violation. Then I've temporarily unloaded prl_tg kernel module and repeated emerge attempt. It succeeded.
(In reply to Ihar Hrachyshka from comment #5) > The build.log file is too large, so it's not allowed to attach it here. Any > suggestions on where to put the file? Compress the file (like with `bzip2 <file>' and then attach it.
Created attachment 370022 [details] build.log
It turned out that similar failure occurs for other packages too. F.e. gtk+. Attaching both build.log and sandbox.log.
Created attachment 370024 [details] gtk+ sandbox violation
Created attachment 370026 [details] gtk+ build.log
prlvideo_drv.so file provided by Parallels Tools indeed contains the following string inside: booxter@localhost ~/bugs/gtk+ $ strings /usr/lib64/xorg/modules/drivers/prlvideo_drv.so|grep prl_vtg /proc/driver/prl_vtg Probably it's related.
Comment on attachment 370026 [details] gtk+ build.log What does this have to do with firefox?
What ebuild installs /usr/lib64/xorg/modules/drivers/prlvideo_drv.so?
(In reply to Jeroen Roovers from comment #14) > What ebuild installs /usr/lib64/xorg/modules/drivers/prlvideo_drv.so? pretty sure it's manually installed. we don't support that on IRC, and I'm moderately certain that in this case, we can't support it here either.
> What does this have to do with firefox? It shows that the problem is more wide, not firefox only. Gtk+ package fails too. > What ebuild installs /usr/lib64/xorg/modules/drivers/prlvideo_drv.so? It does not come from portage. It belongs to Parallels Tools for Mac. > we don't support that on IRC, and I'm moderately certain that in this case, we can't support it here either. I understand your point. If you're not going to support it, then ok.
For those of you interested in workaround. Just add the following to your /etc/sandbox.conf: SANDBOX_WRITE="/proc/driver/prl_vtg"
