Bug 125337 – tetex-3.0_p1-r2 sandbox violation

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description renean 2006-03-07 01:42:06 UTC]

tetex-3 is building, as you can see in the snippet, but after it, it tries to break out of its sandbox.
Entry in the logfile is: mkdir /web2c

Currently there is version 3.0_p1-r1 installed on the system (that once built),
but also that version doesn't build either anymore. The profile was 2005.1 but
I changed it to 2006.0 to try, but nothing changed. The system was once built from stage1.

I have a similar PC but with AthlonXP, same USE-flags despite the ones special
for P4, also same CFLAGS but built initial from stage3 2006.0 where the tetex
build properly.

Errormessage from emerge:
>>> Completed installing tetex-3.0_p1-r2 into /var/tmp/portage/tetex-3.0_p1-r2/image/

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-app-text_-_tetex-3.0_p1-r2-32556.log"

mkdir:     /web2c
--------------------------------------------------------------------------------

USE-flags that apply:
[ebuild     U ] app-text/tetex-3.0_p1-r2 [3.0_p1-r1] USE="X Xaw3d doc motif -lesstif -neXt"

emerge --info:

Portage 2.1_pre5-r4 (default-linux/x86/2006.0, gcc-3.4.5, glibc-2.3.6-r3, 2.6.16-rc4 i686)
=================================================================
System uname: 2.6.16-rc4 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz
Gentoo Base System version 1.12.0_pre16
dev-lang/python:     2.3.5, 2.4.2-r1
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r3
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -fomit-frame-pointer -pipe -march=pentium4"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d"
CXXFLAGS="-O2 -fomit-frame-pointer -pipe -march=pentium4"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftpl.tu-chemnitz.de/pub/linux/gentoo/             http://ftpl.tu-chemnitz.de/pub/linux/gentoo/            http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/          http://ftp.uni-erlangen.de/pub/mirrors/gentoo/          http://mirrors.sec.informatik.tu-darmstadt.de/gentoo/               http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/            http://pandemonium.tiscali.de/pub/gentoo/               ftp://ftp.tu-clausthal.de/pub/linux/gentoo/                 ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo/          ftp://ftp.wh2.tu-dresden.de/pub/mirrors/gentoo/distfiles/"
LANG="de_DE.UTF-8"
MAKEOPTS=""
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 7zip X Xaw3d a52 aac aalib acpi aim alsa apache2 arts avi bash-completion berkdb bitmap-fonts bittorrent bluetooth bzip2 cdparanoia cdr crypt cups curl dts dvb dvd dvdr dvdread eds emboss encode expat fbcon ffmpeg flac foomaticdb fortran ftp gcj gdbm gif gimp glut gnome gphoto2 graphviz gs gstreamer gtk gtk2 gtkhtml guile howl icq idn imagemagick imap imlib ipv6 jabber java javascript jpeg jpeg2k junit lcms libcaca libg++ libwww mad matroska mbox mikmod mime mmx mmxext mng mono motif mozilla mp3 mpeg mpi msn ncurses nls nptl nsplugin ogg oggvorbis opengl oss pam pcntl pcre pdf pdflib perl php png posix postgres ppds python qt quicktime readline real ruby sdl session sharedmem slang snmp sockets speex spell sse sse2 ssl subversion svg sysvipc szip tcpd tetex tga theora threads tiff truetype truetype-fonts type1-fonts udev unicode usb vcd videos vorbis win32codecs wmf wxwindows xine xinerama xml xml2 xmms xpm xv xvid yahoo zlib elibc_glibc kernel_linux userland_GNU"
Unset:  ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY

[Comment 1 Martin Ehmsen (RETIRED) 2006-03-07 03:39:39 UTC]

I can't seem to reproduce this.
I'm pretty sure it is not the ebuild that causes the sandbox violation.
So it must be somewhere in tetex.
Could you try to locate excatly where the problems is, by going to /var/tmp/portage/tetex-3.0_p1-r2/work/tetex-src-3.0, grep around and see if you can figure out what tries to create /web2c and why.

[Comment 2 renean 2006-03-08 07:23:53 UTC]

I looked in the configs and grepped around, but that brought a lot of lines
containing web2c, some in union with shell/makevariables, but I could not
determine where they are set first in the process.

I came to the conclusion, that somehow the configure of tetex must look in
the system an find some illegal configs from former installations.

So I unmerged the installed tetex and cleaned my drive from all files and
directories containing either tetex, texmf or latex and emerged tetex again.
That solved the problem.