Bug 304575 – media-fonts/terminus-font triggers sandbox violations

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Christopher Schwan 2010-02-11 15:51:40 UTC]

"emerge terminus-font" fails to install because of sandbox violation(s):

 * Creating fonts.scale & fonts.dir ...                                                                                                        
ACCESS DENIED  unlinkat:     /usr/share/fonts/terminus/fonts.dir                                                                               
rm: cannot remove `/usr/share/fonts/terminus/fonts.dir': Permission denied                                                                     
ACCESS DENIED  unlinkat:     /usr/share/fonts/terminus/fonts.scale                                                                             
rm: cannot remove `/usr/share/fonts/terminus/fonts.scale': Permission denied                                                                   
ACCESS DENIED  open_wr:      /usr/share/fonts/terminus/fonts.scale                                                                             
/usr/share/fonts/terminus/fonts.scale: fopen(w): Permission denied                                                                             
ACCESS DENIED  open_wr:      /usr/share/fonts/terminus/fonts.dir                                                                               
/usr/share/fonts/terminus/fonts.dir: fopen(w): Permission denied                                                                         [ ok ]
>>> Completed installing terminus-font-4.28 into /var/tmp/portage/media-fonts/terminus-font-4.28/image/                                        


Reproducible: Always




Portage 2.1.7.17 (default/linux/x86/10.0/desktop, gcc-4.3.4, glibc-2.10.1-r1, 2.6.32-gentoo-r4 i686)
=================================================================                                   
System uname: Linux-2.6.32-gentoo-r4-i686-Intel-R-_Pentium-R-_M_processor_1.73GHz-with-gentoo-2.0.1 
Timestamp of tree: Thu, 11 Feb 2010 15:00:01 +0000                                                  
ccache version 2.4 [enabled]                                                                        
app-shells/bash:     4.0_p35                                                                        
dev-lang/python:     2.6.4-r99                                                                      
dev-python/pycrypto: 2.1.0_beta1                                                                    
dev-util/ccache:     2.4-r7                                                                         
dev-util/cmake:      2.6.4-r3                                                                       
sys-apps/baselayout: 2.0.1                                                                          
sys-apps/openrc:     0.6.0-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc:       4.3.4
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=pentium-m -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdep y"
FEATURES="assume-digests ccache distlocks fixpackages news nodoc parallel-fetch protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1"
LINGUAS="de"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/science /usr/local/portage/layman/python /usr/local/portage/layman/sunrise /usr/local/portage /home/gnuke/sage-experiments/sage-on-gentoo"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acpi alsa amr aotuv asf bash-completion berkdb bittorrent branding bzip2 cairo cdda cddb cdparanoia cdr cli consolekit cpudetection cracklib crypt css cups cxx dbus djvu dri dts dvd dvdr dvdread ecl embedded exif fam ffmpeg flac fortran fts3 gd gdbm gif git gnutls graphics hal history i8x0 iconv irmc jabber jpeg jpeg2k kde kipi kpathsea latex mailwrapper matroska mikmod mmx mmxext mng modules mp3 mp4 mpeg mudflap musicbrainz ncurses net nls no-seamonkey nptl nptlonly ogg opengl oscar otr pam pch pcre pdf perl plasma plotutils png policykit ppds pppd pstricks python qt qt3support qt4 quicktime rdesktop rdp readline redland reflex replaygain rtsp samba science semantic-desktop sesame2 session spell sse sse2 ssl startup-notification svg sysfs tcpd theora threads thunar tiff truetype unicode urandom usb userlocales vcd vim-with-x vorbis webkit win32codecs wireshark x264 x86 xcomposite xine xml xorg xv xvid xvmc zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Christopher Schwan 2010-02-11 15:52:21 UTC]

Created attachment 219241 [details]
Sandbox violation log

[Comment 2 Peter Volkov (RETIRED) 2010-02-11 19:14:27 UTC]

Please attach full build.log.

[Comment 3 Christopher Schwan 2010-02-11 19:20:59 UTC]

Created attachment 219271 [details]
Build log

[Comment 4 Tomáš Chvátal (RETIRED) 2010-02-11 19:30:45 UTC]

Ebuild didn't call font_pkg_setup at all.
Fixed in main tree by hacyl0n. Interestingly enough didn't trigger error on tinderbox...