Bug 384291

Summary:	sys-devel/gcc fails to build with +gcj and oracle-jdk-bin as system JDK due to sandbox violations on /proc/self/coredump_filter
Product:	Gentoo Linux	Reporter:	Serkan Kaba (RETIRED) <serkan>
Component:	[OLD] Core system	Assignee:	Gentoo Toolchain Maintainers <toolchain>
Status:	RESOLVED FIXED
Severity:	normal	CC:	java
Priority:	Normal	Keywords:	PATCH
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	346809, 378319
Attachments:	build.log.tar.gz gcc-ebuild.patch toolchain.eclass.patch

Description Serkan Kaba (RETIRED) gentoo-dev

2011-09-24 08:45:48 UTC

Similar to issue on bug #382465. I think we should add all the sandbox exceptions in java-pkg_setup-vm in java-utils-2 eclass, but not sure.

Comment 1 Serkan Kaba (RETIRED) gentoo-dev

2011-09-24 08:48:11 UTC

Created attachment 287591 [details]
build.log.tar.gz

Comment 2 SpanKY gentoo-dev

2011-09-26 03:19:31 UTC

not a bug in gcc

Comment 3 Serkan Kaba (RETIRED) gentoo-dev

2011-09-26 04:45:48 UTC

(In reply to comment #2)
> not a bug in gcc

But it has to be worked around in gcc ebuild.

Comment 4 Vlastimil Babka (Caster) (RETIRED) gentoo-dev

2011-09-26 09:38:51 UTC

I think the problem is due to this check:
"checking for jar... jar"

Bug 378319 is also related.

According to bug 196643, gcc should be fine with either jar or zip and zip was already added as a dep. Unless that didn't change, it would be easiest to prevent this check from happening at all.

Comment 5 Serkan Kaba (RETIRED) gentoo-dev

2011-09-26 12:48:20 UTC

Created attachment 287771 [details, diff]
gcc-ebuild.patch

Comment 6 Serkan Kaba (RETIRED) gentoo-dev

2011-09-26 12:49:40 UTC

I attached a pacth against 4.6.0 ebuild that forces internal jar script which uses zip. I'm not sure whether this should be fixed in the ebuild or the eclass though.

Comment 7 Serkan Kaba (RETIRED) gentoo-dev

2011-09-26 14:53:01 UTC

Created attachment 287791 [details, diff]
toolchain.eclass.patch

Attaching a patch against toolchain.eclass as requested by Mike.

Comment 8 SpanKY gentoo-dev

2011-09-26 15:15:49 UTC

(In reply to comment #3)

no it doesn't.  if running the jdk causes sandbox violations, then it needs a sandbox whitelisting just like the other jdk ebuilds install.  this isn't specific to gcc.

(In reply to comment #7)

we'll need to depend on zip/unzip when USE=gcj since the bundled jar script needs it.  i'll take care of this.

Comment 9 SpanKY gentoo-dev

2011-09-26 20:40:36 UTC

as you said, we already have the ebuilds depend on zip/unzip, so i'll tweak the DEPEND stuff independently

http://sources.gentoo.org/eclass/toolchain.eclass?r1=1.470&r2=1.471