Bug 678198 – app-text/libgepub-0.5.3 : sandbox issue (XDG_xxx_DIR related)

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Toralf Förster 2019-02-17 00:09:02 UTC]

This issue is forced at the tinderbox (pls see bug #567192 too) by setting:

export XDG_DESKTOP_DIR="/root/Desktop"
export XDG_DOCUMENTS_DIR="/root/Documents"
export XDG_DOWNLOAD_DIR="/root/Downloads"
export XDG_MUSIC_DIR="/root/Music"
export XDG_PICTURES_DIR="/root/Pictures"
export XDG_PUBLICSHARE_DIR="/root/Public"
export XDG_TEMPLATES_DIR="/root/Templates"
export XDG_VIDEOS_DIR="/root/Videos"
export XDG_RUNTIME_DIR="/root/run"
export XDG_CONFIG_HOME="/root/config"
export XDG_CACHE_HOME="/root/cache"
export XDG_DATA_HOME="/root/share"

sandbox output:

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkdir
S: deny

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1-desktop-gnome_libressl_20190214-190945

  -------------------------------------------------------------------

  Please see the tracker bug for details.

gcc-config -l:
 [1] x86_64-pc-linux-gnu-8.2.0 *

Available Python interpreters, in order of preference:
  [1]   python3.6
  [2]   python2.7 (fallback)
  [3]   pypy3 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems)
  [2]   ruby25 (with Rubygems)
  [3]   ruby26 (with Rubygems) *

java-config:
The following VMs are available for generation-2:
1)	IcedTea JDK 3.10.0 [icedtea-8]
*)	IcedTea JDK 3.10.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-8 
  [2]   icedtea-bin-8  system-vm

emerge -qpvO app-text/libgepub
[ebuild  N    ] app-text/libgepub-0.5.3  USE="introspection"

[Comment 1 Toralf Förster 2019-02-17 00:09:05 UTC]

Created attachment 565588 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2019-02-17 00:09:08 UTC]

Created attachment 565590 [details]
app-text:libgepub-0.5.3:20190216-212225.log

[Comment 3 Toralf Förster 2019-02-17 00:09:11 UTC]

Created attachment 565592 [details]
emerge-history.txt

[Comment 4 Toralf Förster 2019-02-17 00:09:13 UTC]

Created attachment 565594 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2019-02-17 00:09:16 UTC]

Created attachment 565596 [details]
logs.tbz2

[Comment 6 Toralf Förster 2019-02-17 00:09:19 UTC]

Created attachment 565598 [details]
sandbox-4.log

[Comment 7 Larry the Git Cow 2019-02-17 11:34:46 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=10dd642dc992b2068ca5b8dd4aed0e29dd46e3a3

commit 10dd642dc992b2068ca5b8dd4aed0e29dd46e3a3
Author:     Mart Raudsepp <[e-mail]>
AuthorDate: 2019-02-17 11:00:07 +0000
Commit:     Mart Raudsepp <[e-mail]>
CommitDate: 2019-02-17 11:21:07 +0000

    app-text/libgepub: Fix potential sandbox issue
    
    Closes: https://bugs.gentoo.org/678198
    Package-Manager: Portage-2.3.52, Repoman-2.3.12
    Signed-off-by: Mart Raudsepp <[e-mail]>

 app-text/libgepub/libgepub-0.5.3.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)