Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 878471 - www-client/firefox-106.0.2: sandbox violation, chmod on /var/lib/cache/fontconfig with =media-libs/fontconfig-2.14.1
Summary: www-client/firefox-106.0.2: sandbox violation, chmod on /var/lib/cache/fontco...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-10-27 20:11 UTC by Piotr Karbowski (RETIRED)
Modified: 2022-10-28 12:54 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log.xz,638.56 KB, application/x-xz)
2022-10-27 20:12 UTC, Piotr Karbowski (RETIRED)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Piotr Karbowski (RETIRED) gentoo-dev 2022-10-27 20:11:37 UTC
Currently firefox cannot be merged with USE="X clang dbus gmp-autoupdate hwaccel lto openh264 pgo system-av1 system-harfbuzz system-icu system-jpeg system-libevent system-libvpx system-webp wayland" due to build system trying to chmod the /var/lib/cache/font when built with pgo flag.

    VERSION 1.0
    FORMAT: F - Function called
    FORMAT: S - Access Status
    FORMAT: P - Path as passed to function
    FORMAT: A - Absolute Path (not canonical)
    FORMAT: R - Canonical Path
    FORMAT: C - Command Line

    F: CHMOD
    S: deny
    P: /var/lib/cache/fontconfig
    A: /var/lib/cache/fontconfig
    R: /var/lib/cache/fontconfig
    C: /var/portage/tmp/portage/www-client/firefox-106.0.2/work/firefox_build/instrumented/dist/firefox/firefox data:text/html,<script>Quitter.quit()</script> -profile /var/portage/tmp/portage/www-client/firefox-106.0.2/temp/tmplzhyj6u9
Comment 1 Piotr Karbowski (RETIRED) gentoo-dev 2022-10-27 20:12:09 UTC
Created attachment 825651 [details]
build.log
Comment 2 Joonas Niilola gentoo-dev 2022-10-28 11:18:35 UTC
I'm hitting this now as well. When I pushed 106.0.2 it worked. So what's happened after that? I see... fontconfig updated to 2.14.1 and switched from autotools to meson in that release. It's got to be related.

As a temporary fix we may get away simply by using addpredict, but I guess it's fontconfig that needs to be fixed longterm here.
Comment 3 Larry the Git Cow gentoo-dev 2022-10-28 11:25:25 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ae3cdef3792c2f680eb534e262c30b297f78dcee

commit ae3cdef3792c2f680eb534e262c30b297f78dcee
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-10-28 11:23:57 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-10-28 11:23:57 +0000

    media-libs/fontconfig: fix cache-dir for meson
    
    In 2.14.1, we lost setting the cache dir in the transition to Meson.
    
    Without this, it'd default to /var/lib/cache/fontconfig.
    
    Closes: https://bugs.gentoo.org/878471
    Signed-off-by: Sam James <sam@gentoo.org>

 .../fontconfig/{fontconfig-2.14.1.ebuild => fontconfig-2.14.1-r1.ebuild} | 1 +
 1 file changed, 1 insertion(+)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2ca92c711123ecd732147d087779ad85da81712a

commit 2ca92c711123ecd732147d087779ad85da81712a
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-10-28 11:25:08 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-10-28 11:25:08 +0000

    profiles: mask =media-libs/fontconfig-2.14.1
    
    Keep the mask for a bit so people know they must upgrade it.
    
    Bug: https://bugs.gentoo.org/878471
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/package.mask | 5 +++++
 1 file changed, 5 insertions(+)
Comment 4 Joonas Niilola gentoo-dev 2022-10-28 12:45:42 UTC
Aaand Firefox +lto +pgo emerged succesfully, thanks Sam!
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-10-28 12:54:27 UTC
(In reply to Joonas Niilola from comment #4)
> Aaand Firefox +lto +pgo emerged succesfully, thanks Sam!

<3