Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 756211 - app-crypt/tpm2-tss-2.4.3 sandbox violation $ROOT/usr/share/aclocal/ax_ac_append_to_file.m4 when $ROOT != /
Summary: app-crypt/tpm2-tss-2.4.3 sandbox violation $ROOT/usr/share/aclocal/ax_ac_appe...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Christopher Byrne
URL:
Whiteboard:
Keywords:
Depends on: 738918
Blocks:
  Show dependency tree
 
Reported: 2020-11-23 11:01 UTC by phkb
Modified: 2022-03-26 05:44 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
tpm2-tss build.log (tpm2-tss-2.4.3.log,3.80 KB, text/plain)
2020-11-23 11:02 UTC, phkb 		Details
powertop build.log (powertop-2.13-r1.log,4.26 KB, text/plain)
2020-11-23 11:03 UTC, phkb 		Details
aclocal.out (aclocal.out,466 bytes, text/plain)
2020-11-30 00:09 UTC, phkb 		Details
Fix possible missing BDEPEND on autotools-archive (add-autoconf-archive-to-ebuild.patch,418 bytes, patch)
2020-11-30 04:02 UTC, Christopher Byrne 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description phkb 2020-11-23 11:01:09 UTC 
When building a system in a separate root for another machine, two packages failed to build due to sandbox violations, triggered by "autotools_run_tool --at-m4flags aclocal -I m4 --install" in eautoreconf.
Comment 1 phkb 2020-11-23 11:02:23 UTC 
Created attachment 674452 [details]
tpm2-tss build.log
Comment 2 phkb 2020-11-23 11:03:07 UTC 
Created attachment 674455 [details]
powertop build.log
Comment 3 Jonas Stein gentoo-dev 2020-11-29 12:30:58 UTC 
we need one ticket per package. Please create a new ticket for the other package(s)
Comment 4 Christopher Byrne 2020-11-29 22:28:29 UTC 
I tried doing this setting ROOT to an empty root directory but I cannot replicate - it compiles just fine, no sandbox warning. Do you have a copy of var/tmp/portage/app-crypt/tpm2-tss-2.4.3/temp/aclocal.out ?
Comment 5 phkb 2020-11-30 00:09:34 UTC 
Created attachment 675793 [details]
aclocal.out
Comment 6 Christopher Byrne 2020-11-30 04:02:48 UTC 
Created attachment 675802 [details, diff]
Fix possible missing BDEPEND on autotools-archive

I still can't replicate it but I have an idea what might be wrong. Try patching the app-crypt/tpm2-tss-2.4.3.ebuild file with the following patch which adds a possible missing build dependency.
Comment 7 phkb 2020-11-30 23:12:52 UTC 
I did the edit, nothing changed. Indeed, I already have autotools-archive installed in /. I don't have it installed in $ROOT, but manually installing it there did not solve the bug either.
Comment 8 Christopher Byrne 2021-08-26 04:29:14 UTC 
I can replicate this by having with a cross-compile by having autotools-archive on CBUILD (host) but not in CHOST (target).  Both 2.4.6 and 3.1.0 have the same problem. 

Now that I can replicate it, after looking at the man page for aclocal, I think I know what the problem is. The problem is the way aclocal is invoked: 

aclocal -I /var/thinkpadT430s/usr/share/aclocal -I m4 --install

--install "copies third-party files to the first -I directory". Unfortunately, that's $ROOT/usr/share/aclocal and not m4. The -I arguments need to be reversed.
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-02-19 03:25:40 UTC 
Fixed by the autotools.eclass changes in linked bug.