Bug 144025 – afterstep-2.2.2 sandbox violation

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Sascha Lucas 2006-08-15 10:40:06 UTC]

>>> Completed installing afterstep-2.2.2 into /var/tmp/portage/afterstep-2.2.2/image/

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-x11-wm_-_afterstep-2.2.2-23767.log"

symlink:   /etc/alternatives/x-window-manager.dpkg-tmp
rename:    /var/lib/dpkg/alternatives/x-window-manager.dpkg-new
rename:    /var/lib/dpkg/alternatives/x-window-manager.dpkg-new
--------------------------------------------------------------------------------

# emerge --info
Portage 2.1.1_pre5-r1 (default-linux/x86/2006.0, gcc-4.1.1, glibc-2.4-r3, 2.6.15-gentoo-r4 i686)
=================================================================
System uname: 2.6.15-gentoo-r4 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz
Gentoo Base System version 1.12.4
Last Sync: Tue, 15 Aug 2006 16:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.4 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r2
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/lib/mozilla/defaults/pref /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=pentium4 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo"
LINGUAS="de"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/sunrise /usr/portage/local/layman/nx /usr/portage/local/layman/gentoo-de"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 X aalib alsa apm arts avi bash-completion berkdb bitmap-fonts bzip2 clamav cli crypt cups curl dlloader dri dvd eds elibc_glibc emboss encode esd flac foomaticdb fortran gdbm gif gpm gstreamer gtk gtk2 hal idn imagemagick imap imlib input_devices_evdev input_devices_joystick input_devices_keyboard input_devices_mouse input_devices_vmmouse ipv6 isdnlog java jpeg kde kdeenablefinal kernel_linux lcms ldap libg++ libwww linguas_de mad mikmod mmx mmxext mng motif mozcalendar mozilla mp3 mpeg ncurses nls nptl nptlonly nsplugin ogg opengl oss pam pcre pdf pdflib perl png pppd python qt3 qt4 quicktime readline real reflection sdl session smime snmp softmmu spamassassin spell spl sse sse2 ssl svg tcpd tetex tiff truetype truetype-fonts type1-fonts udev unicode userland_GNU video_cards_dummy video_cards_fbdev video_cards_nv video_cards_vesa video_cards_vga video_cards_vmware vorbis win32codecs wmf xcomposite xine xinerama xml xml2 xmms xorg xprint xscreensaver xv xvid zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Nathan Mahon 2006-09-15 11:05:11 UTC]

i'm not sure about this one.
Where's the "update-alternatives" executable come from?
I don't have it.

The makefile seems to be looking for it... if it's present, uses it to install an entry, otherwise nothing.

I don't have it so I can't reproduce it.

Any other apps have to work around it?

n8

[Comment 2 Sascha Lucas 2006-09-18 00:45:12 UTC]

(In reply to comment #1)
> i'm not sure about this one.
> Where's the "update-alternatives" executable come from?

app-arch/dpkg-1.13.11

> Any other apps have to work around it?

None known to me.

[Comment 3 Nathan Mahon 2006-11-01 10:48:44 UTC]

okay. I've discovered there's no upstream way of fixing the sandbox error.  Currently, I'm putting a patch into portage that removes the call to update-alternatives from the makefile entirely.  When I get time, I'm probably going to try and add the calls to the ebuild, (where they must go), but not today.

I'm curious as to why you're using dpkg (the debian thing) on gentoo, anyway?
did something require it? or do you just like the concept?
(i like the concept, but it makes it impossible to use the same build instructions on a sandbox system as well as a non-sandboxed distro. ( at least not without violating the intentions of the sandbox's build system and/or breaking binary packages )).


n8

[Comment 4 Sascha Lucas 2006-11-01 11:15:59 UTC]

(In reply to comment #3)

> I'm curious as to why you're using dpkg (the debian thing) on gentoo, anyway?
> did something require it? or do you just like the concept?

well it's curious only on the first look. while gentoo/portage + ebuilds rules, some commercial software comes only in binary, or even worse, packed with rpm or dbkg. so rpm/dpkg are my secondary packet manageres (just to keep track of installed files).

If afterstep installes, it's enough for me.

good n8 :-)

[Comment 5 Nathan Mahon 2006-11-10 06:51:45 UTC]

Fixed in the ebuild, we can close this bug.