Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 721728 - www-client/firefox-76.0.1 sandbox violation related to python 3.7
Summary: www-client/firefox-76.0.1 sandbox violation related to python 3.7
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-05-09 01:32 UTC by John Helmert III
Modified: 2020-09-15 19:56 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,71.20 KB, text/x-log)
2020-05-09 01:32 UTC, John Helmert III
Details
emerge --info (emergeinfo,6.54 KB, text/plain)
2020-05-09 01:34 UTC, John Helmert III
Details

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2020-05-09 01:32:22 UTC
Created attachment 636916 [details]
build.log

The relevant build.log bit:

Configure complete!
Be sure to run |mach build| to pick up any changes
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/tmp/portage/www-client/firefox-76.0.1/temp/sandbox.log"
 *
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /usr/lib64/python3.7/lib2to3/Grammar3.7.7.final.0.pickle
A: /usr/lib64/python3.7/lib2to3/Grammar3.7.7.final.0.pickle
R: /usr/lib64/python3.7/lib2to3/Grammar3.7.7.final.0.pickle
C: /var/tmp/portage/www-client/firefox-76.0.1/work/firefox-76.0.1/ff/_virtualenvs/init_py3/bin/python /var/tmp/portage/www-client/firefox-76.0.1/work/firefox-76.0.1/third_party/python/psutil/setup.py build_ext --inplace

F: open_wr
S: deny
P: /usr/lib64/python3.7/lib2to3/PatternGrammar3.7.7.final.0.pickle
A: /usr/lib64/python3.7/lib2to3/PatternGrammar3.7.7.final.0.pickle
R: /usr/lib64/python3.7/lib2to3/PatternGrammar3.7.7.final.0.pickle
C: /var/tmp/portage/www-client/firefox-76.0.1/work/firefox-76.0.1/ff/_virtualenvs/init_py3/bin/python /var/tmp/portage/www-client/firefox-76.0.1/work/firefox-76.0.1/third_party/python/psutil/setup.py build_ext --inplace
 * --------------------------------------------------------------------------------
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2020-05-09 01:34:32 UTC
Created attachment 636918 [details]
emerge --info
Comment 2 Thomas Deutschmann (RETIRED) gentoo-dev 2020-05-09 14:15:30 UTC
Can't reproduce.

Please provide steps how to reproduce in a clean stage3.
Comment 3 Todd Walter 2020-09-15 14:28:33 UTC
I have the same error regarding the Python pickle when emerging 'sys-apps/file' and 'dev-python/python-distutils-extra'.  It's looking for /usr/lib/python3.7/lib2to3/Grammar3.7.7.final.0.pickle when it should be 3.7.8.  Appears PC specific and I haven't been able to determine why.  You can use a symlink to get past it for now.
Comment 4 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2020-09-15 16:41:27 UTC
(In reply to Todd Walter from comment #3)
> I have the same error regarding the Python pickle when emerging
> 'sys-apps/file' and 'dev-python/python-distutils-extra'.  It's looking for
> /usr/lib/python3.7/lib2to3/Grammar3.7.7.final.0.pickle when it should be
> 3.7.8.  Appears PC specific and I haven't been able to determine why.  You
> can use a symlink to get past it for now.

I was able to resolve this issue by removing Python stuff that was installed on root outside of Portage (probably a `sudo pip install ...`).
Comment 5 Todd Walter 2020-09-15 19:56:55 UTC
Thanks, that was it.  Why /opt is given precedence over /usr/lib escapes me but it's fixed now.