Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 96752 - qt-3.3.4-r3 security violation prevents emerge
Summary: qt-3.3.4-r3 security violation prevents emerge
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo KDE team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-06-21 20:12 UTC by Richard Fujimoto
Modified: 2005-06-22 16:35 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Richard Fujimoto 2005-06-21 20:12:00 UTC
x11-libs/qt-3.3.4-r3 cannot be emerged due to a security violation. 

Reproducible: Always
Steps to Reproduce:
1.emerge sync 
2.emerge qt 
 
Actual Results:  
>>> emerge (1 of 1) x11-libs/qt-3.3.4-r3 to /  
!!! Security Violation: A file exists that is not in the manifest.  
!!! File: files/digest-qt-4.0.0_beta2  
 
# ls /usr/portage/x11-libs/qt/files/digest-qt-4.0.0_beta2 
ls: /usr/portage/x11-libs/qt/files/digest-qt-4.0.0_beta2: No such file or 
directory 
 
# grep -R 'digest-qt-4.0.0_beta2' /usr/portage/x11-libs/qt                            
# 

Expected Results:  
 

 
emerge info 
Portage 2.0.51.19 (default-linux/x86/2005.0, gcc-3.4.4, 
glibc-2.3.4.20041102-r1, 2.6.11-ck8-r1 i686) 
================================================================= 
System uname: 2.6.11-ck8-r1 i686 AMD Athlon(tm) XP 2500+ 
Gentoo Base System version 1.6.12 
Python:              dev-lang/python-2.3.5 [2.3.5 (#1, Apr 28 2005, 14:55:14)] 
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) 
[disabled] 
ccache version 2.3 [enabled] 
dev-lang/python:     2.3.5 
sys-apps/sandbox:    [Not Present] 
sys-devel/autoconf:  2.59-r6, 2.13 
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.5, 1.4_p6, 1.6.3, 1.9.5 
sys-devel/binutils:  2.15.92.0.2-r10 
sys-devel/libtool:   1.5.16 
virtual/os-headers:  2.6.5 
ACCEPT_KEYWORDS="x86" 
AUTOCLEAN="yes" 
CFLAGS="-march=athlon-xp -O2 -pipe" 
CHOST="i686-pc-linux-gnu" 
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" 
CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d" 
CXXFLAGS="-march=athlon-xp -O2 -pipe" 
DISTDIR="/usr/portage/distfiles" 
FEATURES="autoaddcvs autoconfig ccache distlocks nostrip sandbox sfperms 
strict userpriv" 
GENTOO_MIRRORS="http://mirrors.tds.net/gentoo http://gentoo.oregonstate.edu 
http://www.ibiblio.org/pub/Linux/distributions/gentoo" 
MAKEOPTS="-j2" 
PKGDIR="/usr/portage/packages" 
PORTAGE_TMPDIR="/var/tmp" 
PORTDIR="/usr/portage" 
PORTDIR_OVERLAY="/usr/local/portage" 
SYNC="rsync://rsync.gentoo.org/gentoo-portage" 
USE="x86 3dnow X acpi alsa arts audiofile avi bash-completion berkdb 
bitmap-fonts cdparanoia cdr crypt cups curl divx4linux dvd dvdr emboss encode 
fam fbcon ffmpeg flac foomaticdb fortran ftp gd gdbm gif gphoto2 gpm gstreamer 
gtk2 hal imagemagick imlib innodb ipv6 java jpeg kde libg++ libwww mad maildir 
mikmod mmx motif mp3 mpeg mysql nas ncurses nls nocd nptl nptlonly nvidia 
offensive ogg oggvorbis opengl pam pcre pdflib perl pic pie png posix postgres 
python qt quicktime readline samba sdl session slang spell sqlite sse ssl svg 
svga tcpd theora tiff truetype truetype-fonts type1-fonts unicode userlocales 
vorbis win32codecs xine xml2 xv xvid zlib userland_GNU kernel_linux 
elibc_glibc" 
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS
Comment 1 Richard Fujimoto 2005-06-21 20:15:41 UTC
current work around is to set FEATURES='-strict', but that shouldn't be the 
correct solution. 
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2005-06-22 02:03:45 UTC
Looks fine here, please emerge sync again.
Comment 3 Richard Fujimoto 2005-06-22 16:35:49 UTC
Sorry about the false alarm, but I found out what was going on:  
  
ls -l /usr/local/portage/x11-libs/qt/files/digest-qt-4.0.0_beta2  
-rw-r--r--  1 root root 81 Apr 15  
22:54 /usr/local/portage/x11-libs/qt/files/digest-qt-4.0.0_beta2  
  
Turns out with FEATURES='strict' the $FILESDIR is considered in OVERLAYS but  
the Manifest file isn't.  I'm closing the bug as INVALID but maybe this should 
be passed over to the portage guys?  Not sure if this is a feature or a bug 
with FEATURES='strict'. 
 
Sorry for the false alarm.