Bug 611702 – net-firewall/gshield-2.8-r3 - QA Notice: Symbolic link /etc/gshield/routables/routable.rules points to /usr/share/gshield/routables/routable.rules which does not exist.

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Toralf Förster 2017-03-04 14:15:56 UTC]

catched this at a tinderbox image desktop_20170228-191423 and do think it is related to that package.

The /var/log/portage/net-firewall:gshield-2.8-r3:20170304-140351.log foesn't contain any interesting lines except :

 * QA Notice: Symbolic link /etc/gshield/routables/routable.rules points to /usr/share/gshield/routables/routable.rules which does not exist.



mr-fox / # emerge --info --verbose=n gshield
Portage 2.3.4 (python 3.4.6-final-0, default/linux/amd64/13.0/desktop, gcc-5.4.0, glibc-2.25, 4.9.13-hardened x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.9.13-hardened-x86_64-Intel-R-_Core-TM-_i7-3930K_CPU_@_3.20GHz-with-gentoo-2.3
KiB Mem:    65283652 total,   2081036 free
KiB Swap:   67108860 total,  67103888 free
Timestamp of repository gentoo: Sat, 04 Mar 2017 11:03:09 +0000
sh bash 4.4_p12
ld GNU ld (Gentoo 2.27 p1.0) 2.27
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.1-r1::gentoo
dev-lang/python:          2.7.13::gentoo, 3.4.6::gentoo
dev-util/cmake:           3.7.2::gentoo
dev-util/pkgconfig:       0.29.1::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/openrc:          0.23.2::gentoo
sys-apps/sandbox:         2.10-r3::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r2::gentoo
sys-devel/automake:       1.11.6-r2::gentoo, 1.13.4-r1::gentoo, 1.15-r2::gentoo
sys-devel/binutils:       2.27::gentoo
sys-devel/gcc:            5.4.0-r3::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r3::gentoo
sys-devel/make:           4.2.1::gentoo
sys-kernel/linux-headers: 4.10::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: 1

tinderbox
    location: /tmp/tb/data/portage
    masters: gentoo
    priority: 2

local
    location: /usr/local/portage
    masters: gentoo
    priority: 99

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native -Wall"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=native"
DISTDIR="/var/tmp/distfiles"
EMERGE_DEFAULT_OPTS="--verbose --verbose-conflicts --color=n --nospinner --tree --quiet-build"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync network-sandbox parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo rsync://mirror.netcologne.de/gentoo/ ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gor.bytemark.co.uk/gentoo/ rsync://ftp.snt.utwente.nl/gentoo"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 berkdb bluetooth branding bzip2 cairo cdda cdr cgi cli consolekit cracklib crypt cups cxx dbus dri dts dvd dvdr emboss encode exif fam filter firefox flac fortran gdbm gif glamor gnome-keyring gpm gtk gudev gui iconv ipv6 jpeg kvm lcms ldap libnotify llvm mad mng modules mp3 mp4 mpeg multilib ncurses nls nptl ogg opencv opengl openmp pam pango pax_kernel pcre pdf perl plotutils png policykit ppds qt3support qt4 rdp readline sddm sdl seccomp session spell sqlite ssl ssp startup-notification svg tcpd tiff truetype udev udisks unicode upower usb vlc vorbis wxwidgets x264 xattr xcb xml xtpax xv xvid xvmc zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby21" USERLAND="GNU" VIDEO_CARDS="intel i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

=================================================================
                        Package Settings
=================================================================

net-firewall/gshield-2.8-r3::gentoo was built with the following:
USE="" ABI_X86="64"


mr-fox / # ls -lR /etc/firewall*
/etc/firewall:
total 4
-rw-r--r-- 1 root root 113 Mar  3 19:57 applet.conf

/etc/firewalld:
total 8
-rw-r--r-- 1 root root 1525 Mar  3 19:57 firewalld.conf
drwxr-xr-x 1 root root    0 Mar  3 19:57 icmptypes
drwxr-xr-x 1 root root    0 Mar  3 19:57 ipsets
-rw-r--r-- 1 root root  271 Mar  3 19:57 lockdown-whitelist.xml
drwxr-xr-x 1 root root    0 Mar  3 19:57 services
drwxr-xr-x 1 root root    0 Mar  3 19:57 zones

/etc/firewalld/icmptypes:
total 0

/etc/firewalld/ipsets:
total 0

/etc/firewalld/services:
total 0

/etc/firewalld/zones:
total 0





 * Searching for /etc/firewall/applet.conf ... 
net-firewall/firewalld-0.4.3.3 (/etc/firewall/applet.conf)

[Comment 1 Toralf Förster 2017-03-04 14:26:03 UTC]

and this should not happen, or ? :

 * Searching for /etc/firewall ... 
net-firewall/firewalld-0.4.3.3 (/etc/firewall)
net-firewall/gshield-2.8-r3 (/etc/firewall -> gshield)

[Comment 2 Toralf Förster 2017-03-04 14:27:02 UTC]

Created attachment 465942 [details]
net-firewall:gshield-2.8-r3:20170304-140351.log

[Comment 3 Jeroen Roovers (RETIRED) 2017-03-05 10:54:12 UTC]

I cannot do anything about that rmdir call that isn't traceable to the ebuild.

[Comment 4 Toralf Förster 2017-03-05 20:01:56 UTC]

And now to something completely different:

What makes this issue interesting for me is that I can reproduce a spurious flow of zero bytes to the stderr file handle of the log file of my tinderbox script.

That log file catches all output which is not handled by the script
https://github.com/toralf/tinderbox/blob/master/bin/job.sh
itself and is called by
https://github.com/toralf/tinderbox/blob/master/bin/start_img.sh

What makes me driving nuts since weeks is that certain tinderbox log files sometimes contain a bunch of zero bytes. Till today I cannot get the culprit for that. With this scriplet :

$> perl -wne 's/\x00/<0x00>/g; print' < ~/logs/plasma-abi32+64_20170228-094845.log

I can make those zeros visible :

tinderbox@mr-fox ~ $ stresc < ~/logs/plasma-abi32+64_20170228-094845.log
<0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00><0x00>rmdir: failed to remove '/etc/firewall': Directory not empty
rmdir: failed to remove '/etc/firewall': Directory not empty

And I can now reproduce that behaviour by simply un- and emerging of the package net-firewall/gshield at the image plasma-abi32+64_20170228-094845

I do wonder where the zeros do come from ?

[Comment 5 Jeroen Roovers (RETIRED) 2017-03-07 08:58:35 UTC]

(In reply to Toralf Förster from comment #4)
> And I can now reproduce that behaviour by simply un- and emerging of the
> package net-firewall/gshield at the image plasma-abi32+64_20170228-094845
> 
> I do wonder where the zeros do come from ?

I have no idea.

Did you try =net-firewall/gshield-2.8-r4 yet? It fixes a problem in -r3 where:

1. mkdir /usr/share/gshield/routables
2. mv /etc/gshield/routables/routable.rules /usr/share/gshield/routable.rules
3. ln -s /usr/share/gshield/routables/routable.rules /etc/gshield/routables/routable.rules

so we ended up with a dangling symlink.

[Comment 6 Toralf Förster 2017-03-12 09:36:16 UTC]

(In reply to Jeroen Roovers from comment #5)
well, -r4 looks fine so far at few images.