Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 724318 - app-admin/syslog-ng-3.22.1: sandbox violation if ROOT is used
Summary: app-admin/syslog-ng-3.22.1: sandbox violation if ROOT is used
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Tomáš Mózes
URL:
Whiteboard:
Keywords:
Depends on: 738918
Blocks:
  Show dependency tree
 
Reported: 2020-05-20 10:23 UTC by Stefan Langenmaier
Modified: 2022-03-26 05:44 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
aclocal-1.out (file_724318.txt,456 bytes, text/plain)
2020-05-20 10:25 UTC, Stefan Langenmaier
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Langenmaier 2020-05-20 10:23:35 UTC
I'm installing into a custom ROOT directory. While building app-admin/syslog-ng-3.22.1 it failed with the following error:




Reproducible: Always

Steps to Reproduce:
1. ROOT=/build/rootfs emerge app-admin/syslog-ng

Actual Results:  
>>> Emerging (22 of 30) app-admin/syslog-ng-3.22.1::gentoo for /build/rootfs/
 * syslog-ng-3.22.1.tar.gz BLAKE2B SHA512 size ;-) ...                                                                                                                   [ ok ]
>>> Unpacking source...
>>> Unpacking syslog-ng-3.22.1.tar.gz to /var/tmp/portage/app-admin/syslog-ng-3.22.1/work
>>> Source unpacked in /var/tmp/portage/app-admin/syslog-ng-3.22.1/work
>>> Preparing source in /var/tmp/portage/app-admin/syslog-ng-3.22.1/work/syslog-ng-3.22.1 ...
 * Running eautoreconf in '/var/tmp/portage/app-admin/syslog-ng-3.22.1/work/syslog-ng-3.22.1/lib/jsonc' ...
 * Running libtoolize --install --copy --force --automake ...                                                                                                            [ ok ]
 * Running aclocal -I /build/rootfs/usr/share/aclocal ...                                                                                                                [ ok ]
 * Running autoconf -I /build/rootfs/usr/share/aclocal --force ...                                                                                                       [ ok ]
 * Running autoheader -I /build/rootfs/usr/share/aclocal ...                                                                                                             [ ok ]
 * Running automake --add-missing --copy --force-missing ...                                                                                                             [ ok ]
 * Running eautoreconf in '/var/tmp/portage/app-admin/syslog-ng-3.22.1/work/syslog-ng-3.22.1' ...
 * Running libtoolize --install --copy --force --automake ...                                                                                                            [ ok ]
 * Running aclocal -I /build/rootfs/usr/share/aclocal -I m4 --install ...
 * ACCESS DENIED:  open_wr:      /build/rootfs/usr/share/aclocal/ax_compare_version.m4                                                                                   [ !! ]

 * Failed Running aclocal !
 * 
 * Include in your bugreport the contents of:
 * 
 *   /var/tmp/portage/app-admin/syslog-ng-3.22.1/temp/aclocal-1.out

 * ERROR: app-admin/syslog-ng-3.22.1::gentoo failed (prepare phase):
 *   Failed Running aclocal !
 * 
 * Call stack:
 *     ebuild.sh, line  125:  Called src_prepare
 *   environment, line 2519:  Called eautoreconf
 *   environment, line 1279:  Called eaclocal
 *   environment, line 1056:  Called autotools_run_tool '--at-m4flags' 'aclocal' '-I' 'm4' '--install'
 *   environment, line 1006:  Called die
 * The specific snippet of code:
 *           die "Failed Running $1 !";
 * 
 * If you need support, post the output of `emerge --info '=app-admin/syslog-ng-3.22.1::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=app-admin/syslog-ng-3.22.1::gentoo'`.
 * The complete build log is located at '/var/tmp/portage/app-admin/syslog-ng-3.22.1/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/app-admin/syslog-ng-3.22.1/temp/environment'.
 * Working directory: '/var/tmp/portage/app-admin/syslog-ng-3.22.1/work/syslog-ng-3.22.1'
 * S: '/var/tmp/portage/app-admin/syslog-ng-3.22.1/work/syslog-ng-3.22.1'
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/tmp/portage/app-admin/syslog-ng-3.22.1/temp/sandbox.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /build/rootfs/usr/share/aclocal/ax_compare_version.m4
A: /build/rootfs/usr/share/aclocal/ax_compare_version.m4
R: /build/rootfs/usr/share/aclocal/ax_compare_version.m4
C: cp /usr/share/aclocal/ax_compare_version.m4 /build/rootfs/usr/share/aclocal/ax_compare_version.m4 
 * --------------------------------------------------------------------------------

>>> Failed to emerge app-admin/syslog-ng-3.22.1 for /build/rootfs/, Log file:

>>>  '/var/tmp/portage/app-admin/syslog-ng-3.22.1/temp/build.log'

Expected Results:  
install the package
Comment 1 Stefan Langenmaier 2020-05-20 10:25:05 UTC
Created attachment 640556 [details]
aclocal-1.out
Comment 2 Stefan Langenmaier 2020-05-20 10:25:55 UTC
Portage 2.3.99 (python 3.7.7-final-0, default/linux/arm/17.0/armv7a, gcc-9.3.0, glibc-2.30-r8, 5.4.38-gentoo-cuboxi armv7l)
=================================================================
System uname: Linux-5.4.38-gentoo-cuboxi-armv7l-ARMv7_Processor_rev_10_-v7l-with-gentoo-2.6
KiB Mem:     2049212 total,    501996 free
KiB Swap:    2047996 total,   2043132 free
Timestamp of repository gentoo: Tue, 19 May 2020 23:08:49 +0000
sh bash 5.0_p17
ld GNU ld (Gentoo 2.33.1 p2) 2.33.1
app-shells/bash:      5.0_p17::gentoo
dev-lang/perl:        5.30.1::gentoo
dev-lang/python:      2.7.18::gentoo, 3.7.7-r2::gentoo
sys-apps/baselayout:  2.6-r1::gentoo
sys-apps/openrc:      0.42.1::gentoo
sys-apps/sandbox:     2.13::gentoo
sys-devel/binutils:   2.33.1-r1::gentoo
sys-devel/gcc:        9.3.0::gentoo
sys-devel/gcc-config: 2.2.1::gentoo
sys-libs/glibc:       2.30-r8::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts: 
    sync-rsync-verify-metamanifest: yes
    sync-rsync-verify-max-age: 24

container-profiles
    location: /usr/local/portage/container-profiles
    masters: gentoo

Installed sets: @container_set
ACCEPT_KEYWORDS="arm"
ACCEPT_LICENSE="@FREE"
CBUILD="armv7a-unknown-linux-gnueabihf"
CFLAGS="-O2 -pipe -march=armv7-a -mfpu=neon -mfloat-abi=hard"
CHOST="armv7a-unknown-linux-gnueabihf"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe -march=armv7-a -mfpu=neon -mfloat-abi=hard"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS=" --usepkg --binpkg-respect-use=y --binpkg-changed-deps=y"
ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-O2 -pipe -march=armv7-a"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe -march=armv7-a"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/build/portage-configroot/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="acl arm armv5te armv6 armv6t2 berkdb bzip2 cli crypt dri fortran gdbm iconv ipv6 ncurses nls nptl openmp pam pcre readline seccomp split-usr ssl tcpd unicode xattr zlib" ADA_TARGET="gnat_2018" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_ARM="edsp thumb thumb2 v4 v5 v6 v7 vfp" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres10 postgres11" PYTHON_SINGLE_TARGET="python3_7" PYTHON_TARGETS="python2_7 python3_7" RUBY_TARGETS="ruby24 ruby25" USERLAND="GNU" VIDEO_CARDS="exynos fbdev omap dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LANG, LC_ALL, LINGUAS, MAKEOPTS, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 3 Wazco 2020-12-26 01:29:31 UTC
This makes it also fail to cross-compile under crossdev.
Comment 4 Nikita Shubin 2021-09-27 14:07:19 UTC
That's happens because app-admin/syslog-ng tries to overwrite file that belongs to autoconf-archive.

equery b /usr/share/aclocal/ax_compiler_vendor.m4
 * Searching for /usr/share/aclocal/ax_compiler_vendor.m4 ... 
sys-devel/autoconf-archive-2021.02.19 (/usr/share/aclocal/ax_compiler_vendor.m4)

Easily workaround-ed by emerging autoconf-archive prior to this, through i can't imagine a fix for this.
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-03-26 05:44:53 UTC
Fixed by eclass change in bug 738918.