Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 633902 - dev-libs/boost-1.65.0 sandbox violation: ACCESS DENIED: symlinkat: /dev/shm/portage/dev-libs/boost-1.65.0/temp/libpython2.7.so
Summary: dev-libs/boost-1.65.0 sandbox violation: ACCESS DENIED: symlinkat: /dev/s...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: C++ Team [disbanded]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-10-10 04:30 UTC by Robin Johnson
Modified: 2017-10-10 16:47 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2017-10-10 04:30:31 UTC
cp "bin.v2/libs/wave/build/gcc-6.4/gentoorelease/boost.locale.icu-off/link-static/pch-off/threading-multi/libboost_wave.a"  "/dev/shm/portage/dev-libs/boost-1.65.0/image/usr/lib32/libboost_wave.a"

 * abi_x86_64.amd64: running multilib-minimal_abi_src_install
 * python2_7: running installation
 * ACCESS DENIED:  symlinkat:    /dev/shm/portage/dev-libs/boost-1.65.0/temp/libpython2.7.so
ln: failed to create symbolic link '/dev/shm/portage/dev-libs/boost-1.65.0/temp/libpython2.7.so': Permission denied
 * ERROR: dev-libs/boost-1.65.0::gentoo failed (install phase):
 *   (no error message)
 * 
 * Call stack:
 *     ebuild.sh, line  124:  Called src_install
 *   environment, line 4467:  Called multilib-minimal_src_install
 *   environment, line 2587:  Called multilib_foreach_abi 'multilib-minimal_abi_src_install'
 *   environment, line 2781:  Called multibuild_foreach_variant '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_install'
 *   environment, line 2417:  Called _multibuild_run '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_install'
 *   environment, line 2415:  Called _multilib_multibuild_wrapper 'multilib-minimal_abi_src_install'
 *   environment, line  441:  Called multilib-minimal_abi_src_install
 *   environment, line 2577:  Called multilib_src_install
 *   environment, line 3092:  Called python_foreach_impl 'installation'
 *   environment, line 3860:  Called multibuild_foreach_variant '_python_multibuild_wrapper' 'installation'
 *   environment, line 2417:  Called _multibuild_run '_python_multibuild_wrapper' 'installation'
 *   environment, line 2415:  Called _python_multibuild_wrapper 'installation'
 *   environment, line  570:  Called installation
 *   environment, line 3050:  Called create_user-config.jam
 *   environment, line  926:  Called die
 * The specific snippet of code:
 *           ln -f -s "$(python_get_library_path)" "${T}/lib${EPYTHON}$(get_libname)" || die;
 * 
 * If you need support, post the output of `emerge --info '=dev-libs/boost-1.65.0::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=dev-libs/boost-1.65.0::gentoo'`.
 * The complete build log is located at '/var/log/portage/build/dev-libs/boost-1.65.0:20171009-230431.log'.
 * For convenience, a symlink to the build log is located at '/dev/shm/portage/dev-libs/boost-1.65.0/temp/build.log'.
 * The ebuild environment file is located at '/dev/shm/portage/dev-libs/boost-1.65.0/temp/environment'.
 * Working directory: '/dev/shm/portage/dev-libs/boost-1.65.0/work/boost_1_65_0-abi_x86_64.amd64'
 * S: '/dev/shm/portage/dev-libs/boost-1.65.0/work/boost_1_65_0'
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-16002.log"

Portage 2.3.11 (python 2.7.14-final-0, default/linux/amd64/13.0/developer, gcc-6.4.0, glibc-2.25-r7, 4.8.0 x86_64)
=================================================================
System uname: Linux-4.8.0-x86_64-Intel-R-_Core-TM-_i7-2620M_CPU_@_2.70GHz-with-gentoo-2.4.1
KiB Mem:     8040040 total,   2208940 free
KiB Swap:    8388604 total,   5162316 free
Timestamp of repository gentoo: Tue, 04 Oct 2016 06:00:01 +0000
Head commit of repository gentoo: 1849bb5cebee7790de32e0b4b881880436d06d28

sh bash 4.4_p12
ld GNU ld (Gentoo 2.29.1 p1.0) 2.29.1
ccache version 3.2.4 [disabled]
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.3::gentoo
dev-lang/python:          2.7.14::gentoo, 3.4.6::gentoo, 3.5.4::gentoo, 3.6.3::gentoo
dev-util/ccache:          3.2.4::gentoo
dev-util/cmake:           3.9.4::gentoo
sys-apps/baselayout:      2.4.1-r2::gentoo
sys-apps/openrc:          9999::gentoo
sys-apps/sandbox:         2.10-r2::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r2::gentoo
sys-devel/automake:       1.9.6-r4::gentoo, 1.10.3-r2::gentoo, 1.11.6-r2::gentoo, 1.12.6-r1::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15-r2::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo, 2.26.1::gentoo, 2.29.1::gentoo
sys-devel/gcc:            5.3.0::gentoo, 5.4.0::gentoo, 6.4.0::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r2::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.7::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25-r7::gentoo
Repositories:

gentoo
    location: /code/gentoo/gentoo-git/repo/gentoo
    sync-type: git
    sync-uri: git+ssh://git@git.gentoo.org/repo/gentoo
    priority: -1000

overlay
    location: /usr/local/portage
    masters: gentoo
    priority: 0

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* @EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe -Wno-deprecated -Wno-deprecated-declarations"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.4/ext-active/ /etc/php/cgi-php5.4/ext-active/ /etc/php/cli-php5.4/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -O2 -pipe -Wno-deprecated -Wno-deprecated-declarations"
DISTDIR="/home/gentoo/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs buildpkg config-protect-if-modified distlocks ebuild-locks fixlafiles lmirror merge-sync mirror multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms sign split-log splitdebug strict test-fail-continue unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://gentoo.osuosl.org/"
LANG="en_US.UTF-8"
LDFLAGS="-Wl,--hash-style=gnu -Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j8 -l3.8"
PKGDIR="/home/gentoo/packages/geim"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/dev/shm"
USE="X a52 aac aalib acl acpi adns adplug agg aio alsa amd64 amr animgif ares arts audiofile audit avahi bash-completion berkdb bluetooth bonjour branding bzip2 cairo calendar cdaudio cdda cddb cdio cdparanoia cdr chardet chm clamav cli consolekit cracklib crypt cscope css ctype cups curl curlwrappers cvs cxx d3d daap dbus dc1394 designer-plugin dia diskio djbfft djvu dri dts dv dvb dvd dvdr dvdread ebook egl emboss emf encode evdev exif expat fam ffmpeg fftw firefox flac fltk fontconfig foomaticdb fortran gd gdbm gdu geoip gif gimp glamor glut gmp gnokii gnutls gpm gps graphviz gsm gstreamer gtk hal ical iconv id3tag idea ieee1394 imagemagick imlib inkjar ipod ipv6 jack java5 java6 javacomm jbig jingle jpeg jpeg2k lash lcms libgcrypt libnotify libsamplerate llvm lm_sensors logitech-mouse lzma lzo mad maildir mhash midi mikmod mmap mmx mng modplug modules mozilla mp3 mp3tunes mp4 mpeg mplayer mudflap multilib multitarget musepack nas ncurses nls nocd nptl nptlonly nsplugin offensive ofx ogg openal openexr opengl openmp openvg oss otr pam pango pccntl pch pcre pda pdf perl plotutils png policykit posix postscript povray ppds pulseaudio python qt3support qt4 qt5 quicktime raw rdesktop readline reflection rpc rss ruby savedconfig scanner sdl seccomp semantic-desktop session sid simplexml slp smp sms smux sndfile snmp sockets socks5 solver speex spell spl sqlite sqlite3 sse sse2 ssl ssse3 startup-notification static-libs subversion svg symlink sysfs syslog sysvipc taglib tcpd theora threads tidy tiff timidity truetype tta twolame udev udisks unicode upower urandom usb v4l v4l2 vcd vcdx videos vim-syntax vnc vorbis vorbis-psy wavpack webkit wideband wifi wma wmf wxwidgets x264 xanim xattr xcb xcomposite xfs xine xinerama xinetd xml xorg xosd xpm xrandr xscreensaver xsl xulrunner xv xvid zeroconf zlib" ABI_X86="64 32" ALSA_CARDS="hda-intel usb-audio usb-usx2y serial-u16550 virmidi seq-dummy dummy" APACHE2_MODULES="actions alias asis auth_basic auth_digest authn_alias authn_anon authn_core authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers imagemap include info log_config log_forensic logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_ftp proxy_http rewrite setenvif socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias slotmem_shm access_compat authn_dbd cache_disk authz_dbd dbd ident lbmethod_bybusyness lbmethod_byrequests lbmethod_bytraffic lbmethod_heartbeat proxy_fcgi proxy_scgi proxy_wstunnel ratelimit remoteip reqtimeout substitute version" APACHE2_MPMS="event" CALLIGRA_FEATURES="kexi words flow plan stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2" CURL_SSL="nss" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" GRUB_PLATFORMS="efi-64 multiboot pc efi-32" INPUT_DEVICES="evdev keyboard mouse void wacom synaptics" KERNEL="linux" LCD_DEVICES="g15 glk graphlcd iowarrior ncurses null png ppm text usbhub usblcd X xosd" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en_CA en_GB en_ZA en_US en af" LLVM_TARGETS="X86 BPF" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-3 php5-6 php7-0" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4 python3_5 python3_6 pypy pypy3" QEMU_SOFTMMU_TARGETS="x86_64 i386" QEMU_USER_TARGETS="x86_64 i386" RUBY_TARGETS="ruby20 ruby21 ruby22 ruby23 ruby24" USERLAND="GNU" VIDEO_CARDS="dummy fbdev intel v4l vga vesa i965" XTABLES_ADDONS="account chaos condition delude dhcpmac dnetmap echo fuzzy geoip iface ipmark ipp2p ipset ipset6 ipv4options length2 logmark lscan pknock psd quota2 rawnat steal sysrq tarpit tee"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Larry the Git Cow gentoo-dev 2017-10-10 16:47:32 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d151daaab1ce39f5b9bf09e0f300010d44064341

commit d151daaab1ce39f5b9bf09e0f300010d44064341
Author:     Robin H. Johnson <robbat2@gentoo.org>
AuthorDate: 2017-10-10 16:43:56 +0000
Commit:     Robin H. Johnson <robbat2@gentoo.org>
CommitDate: 2017-10-10 16:47:22 +0000

    sys-apps/coreutils: ensure sandbox supports renameat/symlinkat.
    
    Prior to sys-apps/sandbox-2.10-r4, sandbox does not correct handle the
    renameat or symlinkat calls made by newer coreutils. This causes random
    sandbox violations during package building.
    
    Package-Manager: Portage-2.3.8, Repoman-2.3.3
    Bug: https://bugs.gentoo.org/612202
    Closes: https://bugs.gentoo.org/628928
    Closes: https://bugs.gentoo.org/633902
    Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>

 sys-apps/coreutils/coreutils-8.27.ebuild | 1 +
 sys-apps/coreutils/coreutils-8.28.ebuild | 1 +
 2 files changed, 2 insertions(+)