Bug 177050 – glibc-2.5-r2 fails to merge on SELinux

• Product: Gentoo Linux
• Status: RESOLVED WORKSFORME

[Description Xake 2007-05-04 16:18:37 UTC]

usr/lib/libc_nonshared.a
   usr/lib/libcrypt.a
   usr/lib/libm.a
   usr/lib/librt_g.a
   usr/lib/libc_g.a
   usr/lib/libnsl_g.a
ACCESS DENIED  open_wr:   /proc/self/task/3293/attr/fscreate
cp: cannot set setfscreatecon `sysadm_u:object_r:portage_tmp_t': Permission denied
ACCESS DENIED  open_wr:   /proc/self/task/3293/attr/fscreate
cp: cannot set setfscreatecon `sysadm_u:object_r:portage_tmp_t': Permission denied
>>> Completed installing glibc-2.5-r2 into /var/tmp/portage/sys-libs/glibc-2.5-r2/image/

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-sys-libs_-_glibc-2.5-r2-23695.log"

open_wr:   /proc/self/task/2326/attr/fscreate (symlink to /proc/2326/task/2326/attr/fscreate)
open_wr:   /proc/self/task/2328/attr/fscreate (symlink to /proc/2328/task/2328/attr/fscreate)
open_wr:   /proc/self/task/2330/attr/fscreate (symlink to /proc/2330/task/2330/attr/fscreate)
open_wr:   /proc/self/task/2332/attr/fscreate (symlink to /proc/2332/task/2332/attr/fscreate)
open_wr:   /proc/self/task/3293/attr/fscreate (symlink to /proc/3293/task/3293/attr/fscreate)
open_wr:   /proc/self/task/3293/attr/fscreate (symlink to /proc/3293/task/3293/attr/fscreate)
--------------------------------------------------------------------------------

$ emerge --info
Portage 2.1.2.5 (selinux/x86/2006.1, gcc-4.1.2, glibc-2.5-r1, 2.6.20-hardened-r2 i686)
=================================================================
System uname: 2.6.20-hardened-r2 i686 Pentium III (Coppermine)
Gentoo Base System release 1.13.0_alpha12
Timestamp of tree: Fri, 04 May 2007 15:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
dev-lang/python:     2.4.4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17.50.0.15
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.23b
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /opt/glftpd/etc /opt/glftpd/ftp-data /usr/lib/fax /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache1-php5/ext-active/ /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=pentium3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distcc distlocks loadpolicy parallel-fetch sandbox selinux sesandbox sfperms strict test"
GENTOO_MIRRORS="ftp://ftp.sunet.se/pub/os/Linux/distributions/gentoo http://ds.thn.htu.se/linux/gentoo "
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/overlays/portage /usr/local/overlays/pieworld /usr/portage/local/layman/webapps-experimental"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="apache2 bash-completion berkdb bzip2 crypt cups curl fam glibc-omitfp gmp hardened ipv6 jpeg logrotate midi mysql ncurses nls nonfsv4 nptl nptlonly offensive pam parport pic png python readline selinux sensord serial srvdir sse ssl syslog tcpd test tiff unicode unzip x86 xattr xinetd zip zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="none"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS