Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 604394 - www-client/firefox[pgo] src_compile(): sandbox violation in writing to /proc/self/oom_score_adj
Summary: www-client/firefox[pgo] src_compile(): sandbox violation in writing to /proc/...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal with 1 vote (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard: PGO
Keywords:
: 646026 646094 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-01-02 13:23 UTC by anonymous
Modified: 2018-02-19 14:48 UTC (History)
14 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log.xz (build.log.xz,259.84 KB, application/x-xz)
2017-01-02 13:25 UTC, anonymous
Details
sandbox.log (sandbox-6334.log,557 bytes, text/plain)
2017-01-02 13:27 UTC, anonymous
Details
ff-58_build_log (build.log.gz,76.86 KB, application/gzip)
2018-01-30 09:38 UTC, Branko Grubic
Details
emerge_info (file_604394.txt,5.77 KB, text/plain)
2018-01-30 09:41 UTC, Branko Grubic
Details

Note You need to log in before you can comment on or make changes to this bug.
Description anonymous 2017-01-02 13:23:22 UTC
www-client/firefox-50.1.0 build fails

Reproducible: Always




emerge --info

Portage 2.3.0 (python 2.7.12-final-0, hardened/linux/amd64, gcc-5.4.0, glibc-2.22-r4, 4.9.0-gentoo x86_64)
=================================================================
System uname: Linux-4.9.0-gentoo-x86_64-AMD_Phenom-tm-_II_X4_970_Processor-with-gentoo-2.3
KiB Mem:     8174640 total,    169752 free
KiB Swap:    4194300 total,   4194300 free
Timestamp of repository gentoo: Mon, 02 Jan 2017 00:02:48 +0000
sh bash 4.3_p48-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
distcc 3.2rc1 x86_64-pc-linux-gnu [disabled]
app-shells/bash:          4.3_p48-r1::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.22.3_rc4::gentoo
dev-lang/python:          2.7.12::gentoo, 3.4.5::gentoo
dev-util/cmake:           3.6.3::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/openrc:          0.22.4::gentoo
sys-apps/sandbox:         2.10-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo
sys-devel/gcc:            5.4.0::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6-r2::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.4::gentoo (virtual/os-headers)
sys-libs/glibc:           2.22-r4::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/gentoo.git
    priority: -1000

ixit
    location: /var/lib/layman/ixit
    sync-type: laymansync
    sync-uri: git://github.com/okias/ixit.git
    masters: gentoo
    priority: 50

kde
    location: /var/lib/layman/kde
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/kde.git
    masters: gentoo
    priority: 50

mooyooma
    location: /var/lib/layman/mooyooma
    sync-type: laymansync
    sync-uri: https://gitlab.com/mooyooma-overlay/mooyooma-overlay.git
    masters: gentoo
    priority: 50

perl-experimental
    location: /var/lib/layman/perl-experimental
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/perl-overlay.git
    masters: gentoo
    priority: 50

qt
    location: /var/lib/layman/qt
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/qt.git
    masters: gentoo
    priority: 50

rion
    location: /var/lib/layman/rion
    sync-type: laymansync
    sync-uri: git://github.com/rion-overlay/rion-overlay.git
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    sync-type: laymansync
    sync-uri: git://github.com/anyc/steam-overlay.git
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=amdfam10 -g"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe -march=amdfam10 -g"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs cgroup config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="uk_UA.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X acl alsa amd64 berkdb bzip2 cli cracklib crypt cups cxx dbus dri gdbm glamor gnutls hardened iconv ipv6 justify mmx mmxext modules multilib ncurses nls nptl opengl openmp pam pax_kernel pcre pie policykit pulseaudio qt3support qt5 readline seccomp semantic-desktop session sse sse2 ssl ssp symlink systemd tcpd unicode urandom vdpau xattr xtpax zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" CURL_SSL="gnutls" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev" KERNEL="linux" L10N="ru ru_RU en uk uk_UA" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="ru ru_RU en uk uk_UA" NGINX_MODULES_HTTP="access gzip fastcgi spdy rewrite" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" QEMU_SOFTMMU_TARGETS="arm" QEMU_USER_TARGETS="arm" RUBY_TARGETS="ruby21" USERLAND="GNU" VIDEO_CARDS="radeon radeonsi nouveau" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Comment 1 anonymous 2017-01-02 13:25:56 UTC
Created attachment 458350 [details]
build.log.xz
Comment 2 anonymous 2017-01-02 13:27:10 UTC
Created attachment 458352 [details]
sandbox.log
Comment 3 Nick Sarnie gentoo-dev 2017-01-09 00:42:15 UTC
Same problem here.
Comment 4 Antoine Lemoine 2017-01-22 14:41:09 UTC
Same problem here. It occurs after I enabled system-sqlite and pgo USE flags.
Comment 5 Antoine Lemoine 2017-01-22 15:34:55 UTC
(In reply to Antoine Lemoine from comment #4)
> Same problem here. It occurs after I enabled system-sqlite and pgo USE flags.

I removed pgo and firefox compiles without errors.
Here is the result of my emerge --info www-client/firefox (without pgo):

Portage 2.3.3 (python 3.4.5-final-0, default/linux/amd64/13.0/desktop/gnome/systemd, gcc-5.4.0, glibc-2.23-r3, 4.9.5-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.9.5-gentoo-x86_64-Intel-R-_Core-TM-_i7-7700K_CPU_@_4.20GHz-with-gentoo-2.3
KiB Mem:    32877612 total,   8662184 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Sat, 21 Jan 2017 12:45:01 +0000
sh bash 4.4_p11
ld GNU ld (Gentoo 2.27 p1.0) 2.27
ccache version 3.3.3 [enabled]
app-shells/bash:          4.4_p11::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.1_rc4::gentoo
dev-lang/python:          2.7.12::gentoo, 3.4.5::gentoo, 3.5.2::gentoo
dev-util/ccache:          3.3.3::gentoo
dev-util/cmake:           3.7.2::gentoo
dev-util/pkgconfig:       0.29.1::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/openrc:          0.23.1::gentoo
sys-apps/sandbox:         2.10-r3::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r2::gentoo
sys-devel/automake:       1.11.6-r2::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15-r2::gentoo
sys-devel/binutils:       2.27::gentoo
sys-devel/gcc:            5.4.0-r2::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r2::gentoo
sys-devel/make:           4.2.1::gentoo
sys-kernel/linux-headers: 4.9::gentoo (virtual/os-headers)
sys-libs/glibc:           2.23-r3::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.fr.gentoo.org/gentoo-portage
    priority: -1000

local
    location: /usr/local/portage
    masters: gentoo
    priority: 0

aidstu
    location: /var/lib/layman/aidstu
    sync-type: laymansync
    sync-uri: git://github.com/etu/aidstu-overlay.git
    masters: gentoo
    priority: 50

bar
    location: /var/lib/layman/bar
    sync-type: laymansync
    sync-uri: git://github.com/tokiclover/bar-overlay.git
    masters: gentoo
    priority: 50

betagarden
    location: /var/lib/layman/betagarden
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/betagarden.git
    masters: gentoo
    priority: 50

laurentb
    location: /var/lib/layman/laurentb
    sync-type: laymansync
    sync-uri: git://github.com/laurentb/gentoo-overlay.git
    masters: gentoo
    priority: 50

qt
    location: /var/lib/layman/qt
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/qt.git
    masters: gentoo
    priority: 50

sabayon
    location: /var/lib/layman/sabayon
    sync-type: laymansync
    sync-uri: git://github.com/Sabayon/for-gentoo.git
    masters: gentoo
    priority: 50

sabayon-tools
    location: /var/lib/layman/sabayon-tools
    sync-type: laymansync
    sync-uri: https://github.com/fusion809/sabayon-tools.git
    masters: gentoo
    priority: 50

science
    location: /var/lib/layman/science
    sync-type: laymansync
    sync-uri: git://github.com/gentoo-science/sci.git
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    sync-type: laymansync
    sync-uri: git://github.com/anyc/steam-overlay.git
    masters: gentoo
    priority: 50

stefantalpalaru
    location: /var/lib/layman/stefantalpalaru
    sync-type: laymansync
    sync-uri: https://github.com/stefantalpalaru/gentoo-overlay.git
    masters: gentoo
    priority: 50

vortex
    location: /var/lib/layman/vortex
    sync-type: laymansync
    sync-uri: git://github.com/nE0sIghT/vortex-overlay.git
    masters: gentoo
    priority: 50

Installed sets: @qt5-essentials, @qt5-tools
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.1/ext-active/ /etc/php/cgi-php7.1/ext-active/ /etc/php/cli-php7.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--keep-going y"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs candy ccache cgroup config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync network-sandbox news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://gentoo.modulix.net/gentoo/ http://de-mirror.org/gentoo/ http://gentoo.mirrors.ovh.net/gentoo-distfiles/"
LANG="fr_FR.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j9"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 berkdb bluetooth branding btrfs bzip2 cairo cdda cdr cli colord cracklib crypt cups cxx dbus dri dts dvd dvdr eds emboss encode evo exif fam fat ffmpeg firefox flac fortran gdbm gif glamor gnome gnome-keyring gnome-online-accounts gphoto2 gpm gstreamer gtk gtk3 iconv icu introspection ipc ipv6 jpeg jpeg2k lcms ldap libnotify libsecret mad midi mmx mmxext mng modules mp3 mp4 mpeg multilib nautilus ncurses networkmanager nls nptl ntfs ogg opengl openmp pam pango pcre pdf php png policykit ppds pulseaudio qt3support qt4 qt5 readline sdl seccomp session spell sse sse2 ssl startup-notification svg symlink systemd tcpd tiff tracker truetype udev udisks unicode upower usb vdpau vim-syntax vorbis wayland wxwidgets x264 xattr xcb xml xv xvid zlib" ABI_X86="32 64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 fma3 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="libinput keyboard mouse" KERNEL="linux" L10N="fr" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="fr" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-0" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby21" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

=================================================================
                        Package Settings
=================================================================

www-client/firefox-50.1.0-r1::gentoo was built with the following:
USE="dbus gmp-autoupdate hwaccel jemalloc jit pulseaudio skia startup-notification system-icu system-jpeg system-libvpx system-sqlite -bindist -custom-cflags -custom-optimization -debug -gtk2 -hardened -jack (-neon) -pgo (-selinux) (-system-cairo) -system-harfbuzz -system-libevent -test -wifi" ABI_X86="64" L10N="fr -ach -af -an -ar -as -ast -az -be -bg -bn-BD -bn-IN -br -bs -ca -cak -cs -cy -da -de -dsb -el -en-GB -en-ZA -eo -es-AR -es-CL -es-ES -es-MX -et -eu -fa -ff -fi -fy -ga -gd -gl -gn -gu -he -hi -hr -hsb -hu -hy -id -is -it -ja -kk -km -kn -ko -lij -lt -lv -mai -mk -ml -mr -ms -nb -nl -nn -or -pa -pl -pt-BR -pt-PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv -ta -te -th -tr -uk -uz -vi -xh -zh-CN -zh-TW"
CFLAGS="-march=native -pipe"
CXXFLAGS="-march=native -pipe"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-rpath=/usr/lib64/firefox,--enable-new-dtags"
Comment 6 Ian Stakenvicius (RETIRED) gentoo-dev 2017-03-20 02:00:03 UTC
Bircoph, can you take this one over?
Comment 7 Andrew Savchenko gentoo-dev 2017-03-20 18:15:43 UTC
Hi guys,

I can't reproduce this problem. What version of dbus are you using?
Comment 8 Nick Sarnie gentoo-dev 2017-04-03 01:21:47 UTC
(In reply to Andrew Savchenko from comment #7)
> Hi guys,
> 
> I can't reproduce this problem. What version of dbus are you using?

Hi.

I just checked again, and this bug is still reproducible. My dbus version is 1.10.16-r1

Thanks,
Sarnex
Comment 9 anonymous 2017-05-06 15:49:19 UTC
www-client/firefox-53.0 compiled successfully. Can someone confirm that?
Comment 10 Nick Sarnie gentoo-dev 2017-05-07 01:50:01 UTC
(In reply to anonymous from comment #9)
> www-client/firefox-53.0 compiled successfully. Can someone confirm that?

I still have this issue on Firefox 53.0.
Comment 11 Antoine Lemoine 2017-05-07 10:05:30 UTC
(In reply to Nick Sarnie from comment #10)
> (In reply to anonymous from comment #9)
> > www-client/firefox-53.0 compiled successfully. Can someone confirm that?
> 
> I still have this issue on Firefox 53.0.

I still have this issue too.
Comment 12 anonymous 2017-05-22 05:30:22 UTC
Sorry, my mistake, I've built firefox without "-PGO". Now I still have this issue with www-client/firefox-53.0-r1

My dbus version is 1.10.18.
Comment 13 Jonas Stein gentoo-dev 2017-05-25 15:18:55 UTC
please try to update to sys-apps/sandbox-2.10-r4
and retry. See also https://bugs.gentoo.org/show_bug.cgi?id=612202
Please report.
Comment 14 Andrii Pravorskyi 2017-05-25 19:20:39 UTC
(In reply to Jonas Stein from comment #13)
> please try to update to sys-apps/sandbox-2.10-r4
> and retry. See also https://bugs.gentoo.org/show_bug.cgi?id=612202
> Please report.

Still happens with sys-apps/sandbox-2.10-r4

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /proc/self/oom_score_adj
A: /proc/self/oom_score_adj
R: /proc/9480/oom_score_adj
C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session 

F: open_wr
S: deny
P: /proc/self/oom_score_adj
A: /proc/self/oom_score_adj
R: /proc/9480/oom_score_adj
C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session
Comment 15 Nick Sarnie gentoo-dev 2017-05-28 08:24:55 UTC
(In reply to Pravorskii Andrii from comment #14)
> (In reply to Jonas Stein from comment #13)
> > please try to update to sys-apps/sandbox-2.10-r4
> > and retry. See also https://bugs.gentoo.org/show_bug.cgi?id=612202
> > Please report.
> 
> Still happens with sys-apps/sandbox-2.10-r4
> 
> VERSION 1.0
> FORMAT: F - Function called
> FORMAT: S - Access Status
> FORMAT: P - Path as passed to function
> FORMAT: A - Absolute Path (not canonical)
> FORMAT: R - Canonical Path
> FORMAT: C - Command Line
> 
> F: open_wr
> S: deny
> P: /proc/self/oom_score_adj
> A: /proc/self/oom_score_adj
> R: /proc/9480/oom_score_adj
> C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session 
> 
> F: open_wr
> S: deny
> P: /proc/self/oom_score_adj
> A: /proc/self/oom_score_adj
> R: /proc/9480/oom_score_adj
> C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session

I also still get this issue with sandbox 2.10-r4
Comment 16 Andrii Pravorskyi 2017-06-19 10:28:35 UTC
Still happens with www-client/firefox-54.0
Comment 17 Jory A. Pratt gentoo-dev 2017-08-26 17:56:31 UTC
If you feel I have closed your bug and it is still a current issue, please reopen and update it completely. We will not work bugs that have no ebuild in tree any longer or can not be reproduced with a current system.

Thank You for your support and understanding
The Mozilla Team
Comment 18 Nick Sarnie gentoo-dev 2017-08-26 22:18:29 UTC
Still happens on Firefox 55.0.2

* --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-13582.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /proc/self/oom_score_adj
A: /proc/self/oom_score_adj
R: /proc/26399/oom_score_adj
C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session 

F: open_wr
S: deny
P: /proc/self/oom_score_adj
A: /proc/self/oom_score_adj
R: /proc/26399/oom_score_adj
C: /usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session 
 * --------------------------------------------------------------------------------

Portage 2.3.8 (python 3.4.6-final-0, default/linux/amd64/13.0/desktop/plasma, gcc-6.4.0, glibc-2.25-r4, 4.12.9-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.12.9-gentoo-x86_64-AMD_Ryzen_7_1800X_Eight-Core_Processor-with-gentoo-2.4.1
KiB Mem:    16360800 total,  12094328 free
KiB Swap:   16777212 total,  16776700 free
Head commit of repository gentoo: 94ccb284c8250d88eb9a91f5d506d238f5fa6f03

sh bash 4.4_p12
ld GNU ld (Gentoo 2.28.1 p1.0) 2.28.1
ccache version 3.3.4 [disabled]
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.2::gentoo
dev-lang/python:          2.7.13::gentoo, 3.4.6::gentoo, 3.5.3::gentoo
dev-util/ccache:          3.3.4::gentoo
dev-util/cmake:           3.9.1::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r1::gentoo
sys-apps/openrc:          0.29::gentoo
sys-apps/sandbox:         2.10-r4::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.13.4-r1::gentoo, 1.15.1-r1::gentoo
sys-devel/binutils:       2.28.1::gentoo
sys-devel/gcc:            6.4.0::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.11::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25-r4::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: https://github.com/gentoo/gentoo.git
    priority: -1000

sarnex
    location: /usr/local/portage
    masters: gentoo

kde
    location: /var/lib/layman/kde
    masters: gentoo
    priority: 50

rion
    location: /var/lib/layman/rion
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    masters: gentoo
    priority: 50

x11
    location: /var/lib/layman/x11
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs candy config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://mirrors.rit.edu/gentoo/ http://cosmos.illinois.edu/pub/gentoo/"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j16"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="NetworkManager X a52 aac acl acpi activities alsa amd64 berkdb bluray branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cups cxx dbus declarative dri dri3 dts dvd dvdr emboss encode exif fam fcitx firefox flac fortran gdbm gif glamor gpm gtk iconv icu ipv6 jpeg kde kipi kwallet lcms ldap libinput libnotify mad mng modules mp3 mp4 mpeg mtp multilib ncurses networkmanager nls nptl ogg opengl openmp pam pango pcre pdf pgo phonon plasma png policykit ppds pulseaudio qml qt3support qt4 qt5 readline sdl seccomp semantic-desktop session spell ssl startup-notification svg tcpd tiff truetype udev udisks unicode upower usb vaapi vdpau vorbis widgets wxwidgets x264 xattr xcb xcomposite xinerama xml xscreensaver xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="libinput wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LLVM_TARGETS="AMDGPU" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby22" USERLAND="GNU" VIDEO_CARDS="radeon r600 amdgpu radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

=================================================================
                        Package Settings
=================================================================

www-client/firefox-55.0.2::gentoo was built with the following:
USE="custom-cflags custom-optimization dbus gmp-autoupdate hwaccel pulseaudio startup-notification system-libvpx -bindist -debug -hardened -jack (-neon) -nsplugin pgo (-selinux) (-system-cairo) -system-harfbuzz -system-icu -system-jpeg -system-libevent -system-sqlite -test -wifi" ABI_X86="(64)" L10N="-ach -af -an -ar -as -ast -az -bg -bn-BD -bn-IN -br -bs -ca -cak -cs -cy -da -de -dsb -el -en-GB -en-ZA -eo -es-AR -es-CL -es-ES -es-MX -et -eu -fa -ff -fi -fr -fy -ga -gd -gl -gn -gu -he -hi -hr -hsb -hu -hy -id -is -it -ja -ka -kab -kk -km -kn -ko -lij -lt -lv -mai -mk -ml -mr -ms -nb -nl -nn -or -pa -pl -pt-BR -pt-PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv -ta -te -th -tr -uk -uz -vi -xh -zh-CN -zh-TW"
CFLAGS="-march=native -pipe"
CXXFLAGS="-march=native -pipe -fno-delete-null-pointer-checks -fno-lifetime-dse -fno-schedule-insns2"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-rpath=/usr/lib64/firefox,--enable-new-dtags"
Comment 19 Nick Sarnie gentoo-dev 2017-08-26 22:36:53 UTC
Dbus info

Portage 2.3.8 (python 3.4.6-final-0, default/linux/amd64/13.0/desktop/plasma, gcc-6.4.0, glibc-2.25-r4, 4.12.9-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.12.9-gentoo-x86_64-AMD_Ryzen_7_1800X_Eight-Core_Processor-with-gentoo-2.4.1
KiB Mem:    16360800 total,  11505872 free
KiB Swap:   16777212 total,  16776700 free
Head commit of repository gentoo: 94ccb284c8250d88eb9a91f5d506d238f5fa6f03

sh bash 4.4_p12
ld GNU ld (Gentoo 2.28.1 p1.0) 2.28.1
ccache version 3.3.4 [disabled]
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.2::gentoo
dev-lang/python:          2.7.13::gentoo, 3.4.6::gentoo, 3.5.3::gentoo
dev-util/ccache:          3.3.4::gentoo
dev-util/cmake:           3.9.1::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r1::gentoo
sys-apps/openrc:          0.29::gentoo
sys-apps/sandbox:         2.10-r4::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.13.4-r1::gentoo, 1.15.1-r1::gentoo
sys-devel/binutils:       2.28.1::gentoo
sys-devel/gcc:            6.4.0::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.11::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25-r4::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: https://github.com/gentoo/gentoo.git
    priority: -1000

sarnex                                                                                                                                                                                       
    location: /usr/local/portage                                                                                                                                                             
    masters: gentoo                                                                                                                                                                          
                                                                                                                                                                                             
kde                                                                                                                                                                                          
    location: /var/lib/layman/kde
    masters: gentoo
    priority: 50

rion
    location: /var/lib/layman/rion
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    masters: gentoo
    priority: 50

x11
    location: /var/lib/layman/x11
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs candy config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://mirrors.rit.edu/gentoo/ http://cosmos.illinois.edu/pub/gentoo/"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j16"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="NetworkManager X a52 aac acl acpi activities alsa amd64 berkdb bluray branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cups cxx dbus declarative dri dri3 dts dvd dvdr emboss encode exif fam fcitx firefox flac fortran gdbm gif glamor gpm gtk iconv icu ipv6 jpeg kde kipi kwallet lcms ldap libinput libnotify mad mng modules mp3 mp4 mpeg mtp multilib ncurses networkmanager nls nptl ogg opengl openmp pam pango pcre pdf pgo phonon plasma png policykit ppds pulseaudio qml qt3support qt4 qt5 readline sdl seccomp semantic-desktop session spell ssl startup-notification svg tcpd tiff truetype udev udisks unicode upower usb vaapi vdpau vorbis widgets wxwidgets x264 xattr xcb xcomposite xinerama xml xscreensaver xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="libinput wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LLVM_TARGETS="AMDGPU" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby22" USERLAND="GNU" VIDEO_CARDS="radeon r600 amdgpu radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

=================================================================
                        Package Settings
=================================================================

sys-apps/dbus-1.10.22::gentoo was built with the following:
USE="X -debug -doc -elogind (-selinux) -static-libs -systemd -test -user-session" ABI_X86="32 (64) (-x32)"
CFLAGS="-march=native -O2 -pipe -rdynamic -rdynamic"
CXXFLAGS="-march=native -O2 -pipe -rdynamic -rdynamic"
Comment 20 josef.95 2017-08-27 15:46:57 UTC
Please run emerge from a proper root login shell
su -l

It should work.
Comment 21 Nick Sarnie gentoo-dev 2017-08-27 17:06:21 UTC
(In reply to josef.95 from comment #20)
> Please run emerge from a proper root login shell
> su -l
> 
> It should work.

That does fix it, but there is some bug here as I didn't have to do that before and I don't have to do it for other packages, even with pgo.
Comment 22 josef.95 2017-08-27 20:52:19 UTC
Sorry no, here is no bug. The package manager should always be used with appropriate permissions and right environment.
Using the package manager with env from user is no good idea.
Comment 23 Nick Sarnie gentoo-dev 2017-08-27 21:18:23 UTC
(In reply to josef.95 from comment #22)
> Sorry no, here is no bug. The package manager should always be used with
> appropriate permissions and right environment.
> Using the package manager with env from user is no good idea.

I have never seen any documentation on any distribution that suggests you use su -l before using the package manager
Comment 24 josef.95 2017-08-27 22:14:42 UTC
(In reply to Nick Sarnie from comment #23)
 
> I have never seen any documentation on any distribution that suggests you
> use su -l before using the package manager

No, "su -l" is not required
"sudo -i" should also work
or a proper linux tty text terminal.
Comment 25 Jeroen Roovers (RETIRED) gentoo-dev 2018-01-30 08:35:39 UTC
*** Bug 646026 has been marked as a duplicate of this bug. ***
Comment 26 Jeroen Roovers (RETIRED) gentoo-dev 2018-01-30 08:35:55 UTC
*** Bug 646094 has been marked as a duplicate of this bug. ***
Comment 27 Branko Grubic 2018-01-30 09:38:31 UTC
Created attachment 517110 [details]
ff-58_build_log

I see that recent report for www-client/firefox-58.0 ( bug 646094 ) is closed against this one. I do understand that sandbox violation is against same/similar kind of access, but there are some differences in that report if I'm not wrong and on my system as well. Both happen in install phase not in compile, also at least for me I don't have USE="pgo" set.
Comment 28 Branko Grubic 2018-01-30 09:41:56 UTC
Created attachment 517112 [details]
emerge_info
Comment 29 Sven B. 2018-01-30 09:50:15 UTC
(In reply to Branko Grubic from comment #27)
> Created attachment 517110 [details]
> ff-58_build_log
> 
> I see that recent report for www-client/firefox-58.0 ( bug 646094 ) is
> closed against this one. I do understand that sandbox violation is against
> same/similar kind of access, but there are some differences in that report
> if I'm not wrong and on my system as well. Both happen in install phase not
> in compile, also at least for me I don't have USE="pgo" set.

See: Bug #646026
Should work in ff 58.0.1 .
Comment 30 Branko Grubic 2018-01-30 10:05:45 UTC
(In reply to Sven B. from comment #29)
> (In reply to Branko Grubic from comment #27)
> > Created attachment 517110 [details]
> > ff-58_build_log
> > 
...
> 
> See: Bug #646026
> Should work in ff 58.0.1 .

Thank you, I will try 58.0.1.
Sorry for the spam with log files and mail notifications caused by me.
Comment 31 Andy Pettinger 2018-01-30 11:05:38 UTC
Any reason why the pgo flag is now masked , question of security,technical or practicality ?
Comment 32 Jory A. Pratt gentoo-dev 2018-02-19 14:48:12 UTC
(In reply to Andy Pettinger from comment #31)
> Any reason why the pgo flag is now masked , question of security,technical
> or practicality ?

Mozilla herd does not support, those developers that said they would support have not been keeping up so was drop'd completely. This is fixed in 58.0.1 so closing