Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 551672 - sys-libs/libcap-2.23: setcap: EOPNOTSUPP no longer properly surfaced in error messages
Summary: sys-libs/libcap-2.23: setcap: EOPNOTSUPP no longer properly surfaced in error...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] GNOME (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
: 551670 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-06-10 13:45 UTC by Helmut Jarausch
Modified: 2015-07-13 06:04 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
strace log (log,19.99 KB, text/plain)
2015-06-11 08:36 UTC, Helmut Jarausch
Details
kernel 4.1-rc7 configuration (Konfig-4.1,94.09 KB, text/x-mpsub)
2015-06-11 08:37 UTC, Helmut Jarausch
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Helmut Jarausch 2015-06-10 13:45:49 UTC
postinst for gnome-base/gnome-keyring-3.16.0 fails with

 * Setting caps 'cap_ipc_lock=ep' on file '/usr/bin/gnome-keyring-daemon' failed:
 * Failed to set capabilities on file `/usr/bin/gnome-keyring-daemon' (Invalid argument)
 * usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ]
 * 
 *  Note <filename> must be a regular (non-symlink) file.
 * ERROR: gnome-base/gnome-keyring-3.16.0::gentoo failed (postinst phase):
 *   could not set caps
 * 
 * Call stack:
 *                     ebuild.sh, line  93:  Called pkg_postinst
 *   gnome-keyring-3.16.0.ebuild, line  73:  Called fcaps '-m' '755' 'cap_ipc_lock' 'usr/bin/gnome-keyring-daemon'
 *                  fcaps.eclass, line 176:  Called die

emerge --info gnome-base/gnome-keyring
Portage 2.2.20 (python 3.4.3-final-0, default/linux/amd64/13.0/desktop, gcc-5.1.0, glibc-2.20-r2, 4.1.0-rc7 x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.1.0-rc7-x86_64-AMD_Phenom-tm-_II_X4_940_Processor-with-gentoo-2.2
KiB Mem:     7906012 total,   1572352 free
KiB Swap:    2097148 total,   1823600 free
Timestamp of repository gentoo: Wed, 10 Jun 2015 06:45:01 +0000
sh bash 4.3_p39
ld GNU ld (Gentoo 2.25 p1.2) 2.25
ccache version 3.2.2 [disabled]
app-shells/bash:          4.3_p39::gentoo
dev-java/java-config:     2.2.0::gentoo
dev-lang/perl:            5.20.2-r1::gentoo
dev-lang/python:          2.7.10::gentoo, 3.4.3::gentoo
dev-util/ccache:          3.2.2::gentoo
dev-util/cmake:           3.2.3::gentoo
dev-util/pkgconfig:       0.28-r3::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.16.4::gentoo
sys-apps/sandbox:         2.6-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r1::gentoo
sys-devel/automake:       1.9.6-r4::gentoo, 1.10.3-r1::gentoo, 1.11.6-r1::gentoo, 1.12.6::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25-r1::gentoo
sys-devel/gcc:            4.8.4::gentoo, 4.9.2::gentoo, 5.1.0::local, 6.0.0_alpha20150419::toolchain
sys-devel/gcc-config:     1.8::gentoo
sys-devel/libtool:        2.4.6-r1::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.0::gentoo (virtual/os-headers)
sys-libs/glibc:           2.20-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync15.de.gentoo.org/gentoo-portage
    priority: -1000

local
    location: /usr/local/portage
    masters: gentoo
    priority: 0

java
    location: /usr/local/portage/layman/java
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/java.git
    masters: gentoo
    priority: 50

lisp
    location: /usr/local/portage/layman/lisp
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/lisp.git
    masters: gentoo
    priority: 50

qt
    location: /usr/local/portage/layman/qt
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/qt.git
    masters: gentoo
    priority: 50

science
    location: /usr/local/portage/layman/science
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/sci.git
    masters: gentoo
    priority: 50

sunrise
    location: /usr/local/portage/layman/sunrise
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/sunrise-reviewed.git
    masters: gentoo
    priority: 50

toolchain
    location: /usr/local/portage/layman/toolchain
    sync-type: laymansync
    sync-uri: git://git.overlays.gentoo.org/proj/toolchain.git
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-mtune=native -O2 -msse3 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/stunnel/stunnel.conf /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-mtune=native -O2 -msse3 -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs buildpkg config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo "
LANG="en_US.iso88591"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="3dnow 3dnowext 3dnowprefetch X a52 aac acl acpi alsa amd64 avahi berkdb branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cups cxx dbus dri dts dvd dvdr emboss encode exif fam ffmpeg fftw firefox flac fortran fuse gdbm gfortran gif gimp glamor gpm gtk gtk3 iconv ipv6 jpeg lapack lcms libnotify mad mmx mmxext mng modules mp3 mp4 mpeg multilib ncurses nls nptl nptlonly ogg opengl openmp pam pango pcre pdf png policykit ppds python qt qt3support qt4 qt5 readline sdl session smp spell sqlite sqlite3 sse sse2 sse3 sse4a ssl startup-notification svg systemd tcl tcpd threads tiff tk truetype udev udisks unicode upower usb vorbis wxwidgets x264 xcb xml xulrunner xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow mmx 3dnowext mmxext popcnt sse sse2 sse3 sse4a" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc multiboot" INPUT_DEVICES="keyboard mouse evdev wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en de" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python3_4" RUBY_TARGETS="ruby22" USERLAND="GNU" VIDEO_CARDS="radeon radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

=================================================================
                        Package Settings
=================================================================

gnome-base/gnome-keyring-3.16.0::gentoo was built with the following:
USE="caps filecaps pam ssh-agent -debug (-selinux) -test" ABI_X86="64"
Comment 1 Alexandre Rostovtsev (RETIRED) gentoo-dev 2015-06-10 14:22:42 UTC
Is /usr/bin/gnome-keyring-daemon a symlink on your system?

What happens if you run "setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon" from the terminal as root?

What version of sys-libs/libcap do you have, with what flags?

How is your / or /usr filesystem mounted? Please provide the output of
grep -E '(/|/usr) ' /proc/mounts
Comment 2 Helmut Jarausch 2015-06-10 16:15:16 UTC
(In reply to Alexandre Rostovtsev from comment #1)

> Is /usr/bin/gnome-keyring-daemon a symlink on your system?


ls -l /usr/bin/gnome-keyring-daemon
-rwx--x--x 1 root root 969024 Jun 10 10:56 /usr/bin/gnome-keyring-daemon

realpath /usr/bin/gnome-keyring-daemon
/usr/bin/gnome-keyring-daemon


> What happens if you run "setcap cap_ipc_lock=ep
> /usr/bin/gnome-keyring-daemon" from the terminal as root?

setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon 

Failed to set capabilities on file `/usr/bin/gnome-keyring-daemon' (Invalid argument)
usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ]

 Note <filename> must be a regular (non-symlink) file.

> 
> What version of sys-libs/libcap do you have, with what flags?


eix -e sys-libs/libcap

     Installed versions:  2.24-r1{tbz2}(06:12:46 PM 06/10/2015)(pam -static-libs ABI_MIPS="-n32 -n64 -o32" ABI_PPC="-32 -64" ABI_S390="-32 -64" ABI_X86="64 -32 -x32")


> How is your / or /usr filesystem mounted? Please provide the output of
> grep -E '(/|/usr) ' /proc/mounts

grep -E '(/|/usr) ' /proc/mounts
/dev/root / ext4 rw,relatime,data=ordered 0 0
Comment 3 Alexandre Rostovtsev (RETIRED) gentoo-dev 2015-06-10 16:51:20 UTC
(In reply to Helmut Jarausch from comment #2)

Thanks. Something odd is going on with libcap here. It seems that for you cap_set_file() is setting errno = EINVAL, which results in "Invalid argument" being printed, and that in turn confuses fcaps.eclass. But after quickly looking at libcap code, I don't understand why cap_set_file() would set EINVAL if the file is not a symlink.


Could you please rebuild libcap with CFLAGS="-DDEBUG" and then run "setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon" again? It should print some debug traces to help diagnose the problem.


Assigning to libcap maintainers since the issue seems to be either in libcap or in libcap -- fcaps.eclass interaction.
Comment 4 Helmut Jarausch 2015-06-10 17:38:44 UTC
(In reply to Alexandre Rostovtsev from comment #3)

> Could you please rebuild libcap with CFLAGS="-DDEBUG" and then run "setcap
> cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon" again? It should print some
> debug traces to help diagnose the problem.
> 
> 
46 # setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon   
cap_get_proc(cap_proc.c:18): getting current process' capabilities
cap_from_text(cap_text.c:140): cap_ipc_lock=ep
cap_from_text(cap_text.c:195): next char = `e'
cap_from_text(cap_text.c:215): how to read?
cap_from_text(cap_text.c:195): next char = `p'
cap_from_text(cap_text.c:215): how to read?
cap_from_text(cap_text.c:257): next clause
cap_from_text(cap_text.c:153): e = 0000000000004000
cap_from_text(cap_text.c:154): i = 0000000000000000
cap_from_text(cap_text.c:155): p = 0000000000004000
cap_to_text(cap_text.c:358): e = 0000000000004000
cap_to_text(cap_text.c:359): i = 0000000000000000
cap_to_text(cap_text.c:360): p = 0000000000004000
cap_to_text(cap_text.c:423): = cap_ipc_lock+ep
caps set to: [= cap_ipc_lock+ep]
cap_set_proc(cap_proc.c:39): setting process capabilities
_fcaps_save(cap_file.c:128): setting named file capabilities
cap_set_file(cap_file.c:291): setting filename capabilities
cap_get_flag(cap_flag.c:29): invalid arguments
Failed to set capabilities on file `/usr/bin/gnome-keyring-daemon' (Invalid argument)
usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ]

 Note <filename> must be a regular (non-symlink) file.
Comment 5 jospezial 2015-06-11 01:17:10 UTC
The same on my system

* Error messages for package gnome-base/gnome-keyring-3.16.0:

 * FAILED postinst: 1
 * Setting caps 'cap_ipc_lock=ep' on file '/usr/bin/gnome-keyring-daemon' failed:
 * Failed to set capabilities on file `/usr/bin/gnome-keyring-daemon' (Invalid argument)
 * usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ]
 * 
 *  Note <filename> must be a regular (non-symlink) file.
 * ERROR: gnome-base/gnome-keyring-3.16.0::gentoo failed (postinst phase):
 *   could not set caps
 * 
 * Call stack:
 *     ebuild.sh, line   93:  Called pkg_postinst
 *   environment, line 3369:  Called fcaps '-m' '755' 'cap_ipc_lock' 'usr/bin/gnome-keyring-daemon'
 *   environment, line 1758:  Called die
 * The specific snippet of code:
 *                               die "could not set caps"
 * 


logfile is not there.

emerge --info ;emerge  -pv1 gnome-keyring              
Portage 2.2.20 (python 3.3.5-final-0, default/linux/amd64/13.0, gcc-5.1.0, glibc-2.20-r2, 4.1.0-rc7 x86_64)
=================================================================
System uname: Linux-4.1.0-rc7-x86_64-AMD_Athlon-tm-_II_X2_240_Processor-with-gentoo-2.2
KiB Mem:     4047324 total,    888124 free
KiB Swap:   11010040 total,  11005156 free
Timestamp of repository gentoo: Wed, 10 Jun 2015 22:45:01 +0000
sh bash 4.3_p39
ld GNU ld (Gentoo 2.25 p1.2) 2.25
ccache version 3.2.2 [enabled]
app-shells/bash:          4.3_p39::gentoo
dev-java/java-config:     2.2.0::gentoo
dev-lang/perl:            5.20.2-r1::gentoo
dev-lang/python:          2.7.10::gentoo, 3.3.5-r1::gentoo, 3.4.3::gentoo
dev-util/ccache:          3.2.2::gentoo
dev-util/cmake:           3.2.3::gentoo
dev-util/pkgconfig:       0.28-r3::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.16.4::gentoo
sys-apps/sandbox:         2.6-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r1::gentoo
sys-devel/automake:       1.10.3-r1::gentoo, 1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25-r1::gentoo
sys-devel/gcc:            5.1.0::gentoo
sys-devel/gcc-config:     1.8::gentoo
sys-devel/libtool:        2.4.6-r1::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.0::gentoo (virtual/os-headers)
sys-libs/glibc:           2.20-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.de.gentoo.org/gentoo-portage
    priority: -1000

overlay_jl
    location: /usr/local/portage
    masters: gentoo
    priority: 0

betagarden
    location: /var/lib/layman/betagarden
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/betagarden.git
    masters: gentoo
    priority: 50

gamerlay
    location: /var/lib/layman/gamerlay
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/gamerlay.git
    masters: gentoo
    priority: 50

java
    location: /var/lib/layman/java
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/java.git
    masters: gentoo
    priority: 50

kde
    location: /var/lib/layman/kde
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/kde.git
    masters: gentoo
    priority: 50

qt
    location: /var/lib/layman/qt
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/qt.git
    masters: gentoo
    priority: 50

wine-overlay
    location: /var/lib/layman/wine-overlay
    sync-type: laymansync
    sync-uri: git://github.com/NP-Hardass/wine-overlay.git
    masters: gentoo
    priority: 50

Installed sets: @kde-applications-live, @kde-frameworks-live, @kde-plasma-live
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask-write=y --keep-going --quiet-build=y"
FCFLAGS="-march=native -O2 -pipe"
FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=native -O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="de_DE.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="3dnow 3dnowext 64bit X Xaw3d a52 aac aacplus aacs aalib accessibility ace acl acpi activefilter aften alsa amd64 ap apm apng archive arping audacious audiofile automount bazaar bdplus berkdb binary-drivers bluetooth bluray boost bzip2 bzr cairo canusb ccache cdda cddb cdio cdparanoia cdr cdrdao cdrom cgi charconv chm chroot cjk clang cli client colordiff colors compress consolekit corefonts cpio cracklib crypt css cue cups curl curlwrappers cvs cxx daemon dbus declarative device-mapper dga dhcp doom doomsday dos download-subs dri dri3 dts dump dv dvb dvd dvdnav eap eap-sim eap-tls ebook egl emerald emoticon enca encode enscript equalizer evdev exif extensions extras faac faad fam farstream fat fax fbcon fdformat ffmpeg fftw firefox flac fluidsynth fontconfig foomaticdb fortran freedoom ftp fuse g3dvl gadu gallium gbm gd gdbm geoip gif gimp git glamor glut gme gnutls gpg gphoto2 gpm graphite gsm gstreamer gtk gtk3 gtkstyle gudev gui gzip hddtemp hdf hdf5 heretic hexen hid highlight hpcups hpijs http hwdb iconv icq icu id3tag idn imagemagick introspection ios ipc ipod ipv6 jack java javascript jit jpeg jpeg2k kate keymap ladspa lame lcms lensfun libass libcanberra libkms libnotify libsamplerate libssh2 libtiger libv4l libwww live llvm-shared-libs lm_sensors logrotate lua lzma lzo mad madwifi magic man matroska md5sum meanwhile mercurial metalink midi mikmod mime minizip mixer mjpeg mmap mms mmx mmxext mng mobi mod modplug modules mono mouse mozilla mp3 mp4 mpeg mpeg2 mplayer mtp multilib multimedia multislot musepack musicbrainz nano-syntax ncat ncurses ndiff network nfs nfsidmap nfsv4 nfsv41 nls nmap-update nokia normalize nowlistening nping nptl nsplugin ntfs ntfsprogs ntp nvidia nvram obex ocr ogg ogm openal opencl opengl openmax openmp openssl oscar osdmenu otr p2p pam pango panorama parport parse-clocks pcap pci pcre pcre16 pdf pipes plugins pm-utils png policykit postproc postscript ppds printsupport privacy projectm pulseaudio pvr python python3 qalculate qml qt5 quicktime r600-llvm-compiler radio rar raw rdesktop readline recording redeyes reiser4 reiserfs remote-access replaygain rpm rtc rtmp rtsp rubberband s3tc sbsms scanner schroedinger scripttools sdl secure-delete sensord session sftp sha512 shorten shout skins slang smi sndfile snowberry sockets sound soundtouch sox speex spell sql sqlite sqlite3 sse sse2 ssh ssl startup-notification statistics stk stream subtitles subversion svg swat symlink sync-plugin-portage syslog system-jsoncpp szip taglib tcpd texteffect tftp tftpd theora threads thumbnail tiff timidity tracepath traceroute translator truetype twolame udev udisks unicode upower urlpicpreview usb v4l vaapi vamp vcd vcdx vdpau video videos virtualbox vlm vnc vorbis vpx vroot vst wad wav wavpack webgl webkit webm webp webpresence widgets wifi winbind winpopup wmf wps wxwidgets x264 x265 xa xattr xcb xcomposite xfs xine xinerama xinetd xkb xml xmp xorg xosd xpm xrandr xscreensaver xv xvid xvmc yahoo zenmap zip zlib zvbi" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard mouse joystick" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="de" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python3_3" PYTHON_TARGETS="python2_7 python3_3 python3_4" RUBY_TARGETS="ruby19 ruby20 ruby21 ruby22" USERLAND="GNU" VIDEO_CARDS="fbdev vesa svga vga radeon modesetting r100 r200 r300 r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON


These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] gnome-base/gnome-keyring-3.16.0::gentoo  USE="caps filecaps pam ssh-agent -debug (-selinux) {-test}" 0 KiB
Comment 6 SpanKY gentoo-dev 2015-06-11 05:46:02 UTC
attach your kernel config

also run and attach the log file from:
  strace -s 4096 -v -o log setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon
Comment 7 Andrey Grozin gentoo-dev 2015-06-11 07:51:36 UTC
Same here

elrond ~ # ls -l /usr/bin/gnome-keyring-daemon
-rwx--x--x 1 root root 1101468 июн 11 13:27 /usr/bin/gnome-keyring-daemon*

elrond ~ # setcap cap_ipc_lock=ep /usr/bin/gnome-keyring-daemon
Failed to set capabilities on file `/usr/bin/gnome-keyring-daemon' (Invalid argument)
usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ ... (-r|-|<capsN>) <filenameN> ]

 Note <filename> must be a regular (non-symlink) file.

elrond ~ # eix -e sys-libs/libcap
[I] sys-libs/libcap
     Available versions:  2.17 (~)2.19 (~)2.20 (~)2.21 2.22 (~)2.22-r1 2.22-r2 (~)2.24 (~)2.24-r1 {pam static-libs ABI_MIPS="n32 n64 o32" ABI_PPC="32 64" ABI_S390="32 64" ABI_X86="32 64 x32"}
     Installed versions:  2.24-r1(12:11:21 05.06.2015)(pam -static-libs ABI_MIPS="-n32 -n64 -o32" ABI_PPC="-32 -64" ABI_S390="-32 -64" ABI_X86="32 -64 -x32")
     Homepage:            http://www.friedhoff.org/posixfilecaps.html
     Description:         POSIX 1003.1e capabilities

elrond ~ # grep -E '(/|/usr) ' /proc/mounts
rootfs / rootfs rw 0 0
/dev/sda3 / ext3 rw,noatime,errors=continue,barrier=1,data=ordered 0 0
Comment 8 Helmut Jarausch 2015-06-11 08:36:39 UTC
Created attachment 404924 [details]
strace log
Comment 9 Helmut Jarausch 2015-06-11 08:37:33 UTC
Created attachment 404926 [details]
kernel 4.1-rc7 configuration
Comment 10 Pacho Ramos gentoo-dev 2015-06-11 08:43:46 UTC
*** Bug 551670 has been marked as a duplicate of this bug. ***
Comment 11 Helmut Jarausch 2015-06-11 09:13:18 UTC
(In reply to Helmut Jarausch from comment #9)
> Created attachment 404926 [details]
> kernel 4.1-rc7 configuration

The strace log showed an error:
setxattr("/usr/bin/gnome-keyring-daemon", "security.capability", "\1\0\0\2\0@\0\0\0\0\0\0\0\0\0\0\0\0\0", 20, 0) = -1 EOPNOTSUPP (Operation not supported)

Reconfiguring the kernel with

CONFIG_EXT4_FS_SECURITY=y

fixed this to
setxattr("/usr/bin/gnome-keyring-daemon", "security.capability", "\1\0\0\2\0@\0\0\0\0\0\0\0\0\0\0\0\0\0", 20, 0) = 0

and now postinst SUCCEEDS !!!

Thanks for your help,
Helmut
Comment 12 SpanKY gentoo-dev 2015-07-13 06:01:06 UTC
the issue is that the setcap code sees the error, but then clobbers the errno before it gets a chance to print it out.  the bad commit is this:
https://git.kernel.org/cgit/linux/kernel/git/morgan/libcap.git/commit/?id=056ffb0bd25d91ffbcb83c521fc4d3d9904ec4d4
Comment 13 SpanKY gentoo-dev 2015-07-13 06:04:35 UTC
should be all set now in the tree; thanks for the report!

Commit message: Fix errno display in setcap
http://sources.gentoo.org/sys-libs/libcap/files/libcap-2.24-setcap-errno.patch?rev=1.1
http://sources.gentoo.org/sys-libs/libcap/libcap-2.24-r2.ebuild?rev=1.1