Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 949910 - media-gfx/gimp: 9999 failed build: sandbox access denied
Summary: media-gfx/gimp: 9999 failed build: sandbox access denied
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Sergey Torokhov
URL: https://gitlab.gnome.org/GNOME/gimp/-...
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks: 949641
  Show dependency tree
 
Reported: 2025-02-18 14:37 UTC by Sergey Torokhov
Modified: 2025-02-28 13:03 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge.info,6.91 KB, text/plain)
2025-02-18 14:38 UTC, Sergey Torokhov
Details
build.log.bz2 (build.log.bz2,74.42 KB, application/x-bzip2)
2025-02-18 14:40 UTC, Sergey Torokhov
Details
sandbox.log (sandbox.log,53.29 KB, text/x-log)
2025-02-18 14:40 UTC, Sergey Torokhov
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Sergey Torokhov 2025-02-18 14:37:48 UTC
media-gfx/gimp-9999 and gimp-3.0-.0_rc3 failed to compile with sandbox access denied error

Reproducible: Always

Steps to Reproduce:
1. Get gimp-9999.ebuild introduced in https://github.com/gentoo/gentoo/pull/40634 
2. Try to emerge
3. The sandbox access denied with multiple error like:
...
ACCESS DENIED:  open_wr:            /proc/6996/task/6996/mem
...
---------------------- SANDBOX ACCESS VIOLATION SUMMARY -----------------------
LOG FILE: "/var/no-tmpfs/portage/media-gfx/gimp-9999/temp/sandbox.log"
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /proc/self/mem
A: /proc/self/mem
R: /proc/6958/mem
C: gdb --return-child-result --batch -x /var/no-tmpfs/portage/media-gfx/gimp-9999/work/gimp-9999/tools/debug-in-build-gimp.py --args /var/no-tmpfs/portage/media-gfx/gimp-9999/work/gimp-9999-build/app/gimp-console-3.0 -nidfs ../gimp-9999/gimp-data/images/gimp-splash.xcf.xz --batch-interpreter python-fu-eval -b - --quit 
...
Comment 1 Sergey Torokhov 2025-02-18 14:38:20 UTC
Created attachment 919306 [details]
emerge --info
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-02-18 14:38:33 UTC
Can you try to stop it invoking gdb?
Comment 3 Sergey Torokhov 2025-02-18 14:40:23 UTC
Created attachment 919307 [details]
build.log.bz2
Comment 4 Sergey Torokhov 2025-02-18 14:40:38 UTC
Created attachment 919308 [details]
sandbox.log
Comment 5 Sergey Torokhov 2025-02-18 14:43:00 UTC
Sam, I could try to do it not early Sunday. I will out of my PC since this evening.
Now will report to upstream too.

This issue is block gimp-3.0_rc3 too.
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-02-18 15:03:06 UTC
ACK.

See https://gitlab.gnome.org/GNOME/gimp/-/issues/12904 too, by the way...
Comment 7 Larry the Git Cow gentoo-dev 2025-02-19 18:22:36 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cf32b973fed4b5b00d384d70524e56d1e7a0360d

commit cf32b973fed4b5b00d384d70524e56d1e7a0360d
Author:     Sergey Torokhov <torokhov-s-a@yandex.ru>
AuthorDate: 2025-02-18 13:34:34 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2025-02-19 18:22:00 +0000

    media-gfx/gimp: 9999, rm g-ir-doc meson option
    
    [sam: I'm merging this despite bug #944910 given not everyone has gdb
    installed and this change is definitely right as it is anyway.]
    
    Bug: https://bugs.gentoo.org/949910
    Closes: https://bugs.gentoo.org/949365
    Signed-off-by: Sergey Torokhov <torokhov-s-a@yandex.ru>
    Closes: https://github.com/gentoo/gentoo/pull/40634
    Signed-off-by: Sam James <sam@gentoo.org>

 media-gfx/gimp/gimp-9999.ebuild | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)
Comment 8 Larry the Git Cow gentoo-dev 2025-02-28 13:02:23 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=27ecdf59f33a237b3c682ffe8966247635fa0b42

commit 27ecdf59f33a237b3c682ffe8966247635fa0b42
Author:     Sergey Torokhov <torokhov-s-a@yandex.ru>
AuthorDate: 2025-02-27 18:33:38 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2025-02-28 13:01:53 +0000

    media-gfx/gimp: 3.0.0_rc3 version bump
    
    Still affected fails test "gimp:app / core" TIMEOUT issue
    
    Bug: https://bugs.gentoo.org/936290
    Bug: https://bugs.gentoo.org/949910
    Closes: https://bugs.gentoo.org/949641
    Signed-off-by: Sergey Torokhov <torokhov-s-a@yandex.ru>
    Closes: https://github.com/gentoo/gentoo/pull/40800
    Signed-off-by: Sam James <sam@gentoo.org>

 media-gfx/gimp/Manifest                            |   1 +
 .../gimp-3.0.0_rc3_debug_self_gdb_optional.patch   |  65 +++++
 media-gfx/gimp/gimp-3.0.0_rc3.ebuild               | 266 +++++++++++++++++++++
 media-gfx/gimp/gimp-9999.ebuild                    |   3 +-
 4 files changed, 334 insertions(+), 1 deletion(-)