Bug 398179 – dev-db/mysql-5.1.56 sandbox violations: ACCESS DENIED unlinkat: /usr/share/info/libc.info-6.bz2

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Alex Barker 2012-01-08 19:05:10 UTC]

building mysql causes sandbox violations.

Reproducible: Always

Steps to Reproduce:
1. emerge -av mysql

Actual Results:  
see attached logs

[Comment 1 Alex Barker 2012-01-08 19:09:14 UTC]

Created attachment 298347 [details]
emerge_info.txt

[Comment 2 Alex Barker 2012-01-08 19:09:35 UTC]

Created attachment 298349 [details]
sandbox.log

[Comment 3 Alex Barker 2012-01-08 19:10:02 UTC]

build.log: http://paste.pocoo.org/raw/531880/

[Comment 4 Alex Barker 2012-01-08 19:41:36 UTC]

I should note that FEATURES="-sandbox" allows the installation to complete normally.  This is a brand new system, was emerging kde-meta and mysql was pulled as one of the 500 or so depends.

[Comment 5 Dominik Honnef 2012-01-08 22:03:41 UTC]

Same problem here. Also happens with dev-db/mysql-5.1.51

[Comment 6 Jeroen Roovers (RETIRED) 2012-01-09 19:21:16 UTC]

(In reply to comment #3)
> build.log: http://paste.pocoo.org/raw/531880/

Please attach that file to this bug report.

[Comment 7 Alex Barker 2012-01-09 21:41:18 UTC]

(In reply to comment #6)
> (In reply to comment #3)
> > build.log: http://paste.pocoo.org/raw/531880/
> 
> Please attach that file to this bug report.

Cannot attach, It is to large.

[Comment 8 Alex Barker 2012-01-09 21:45:31 UTC]

Created attachment 298425 [details]
build.log.bz

Added compressed build.log to the bug.

[Comment 9 Jorge Manuel B. S. Vicetto (RETIRED) 2012-01-10 16:52:54 UTC]

*** This bug has been marked as a duplicate of bug 398025 ***

[Comment 10 Jorge Manuel B. S. Vicetto (RETIRED) 2012-01-10 17:00:56 UTC]

(In reply to comment #4)
> I should note that FEATURES="-sandbox" allows the installation to complete
> normally.  This is a brand new system, was emerging kde-meta and mysql was
> pulled as one of the 500 or so depends.

You really, *really* don't want to do that. By adding the prefix support to the mysql.eclass, the ebuild run the following command:

rm -Rf "${ED}/usr/share/info"

As the ebuild was using EAPI-2, this meant it really run the following:

rm -Rf "/usr/share/info"

Therefore by disabling the sandbox protection, one will allow the ebuild to remove everything inside /usr/share/info.
If you hit this issue please sync ASAP and do *not* disable sandbox.

[Comment 11 Alex Barker 2012-01-11 03:02:35 UTC]

(In reply to comment #10)
> (In reply to comment #4)
> > I should note that FEATURES="-sandbox" allows the installation to complete
> > normally.  This is a brand new system, was emerging kde-meta and mysql was
> > pulled as one of the 500 or so depends.
> 
> You really, *really* don't want to do that. By adding the prefix support to the
> mysql.eclass, the ebuild run the following command:
> 
> rm -Rf "${ED}/usr/share/info"
> 
> As the ebuild was using EAPI-2, this meant it really run the following:
> 
> rm -Rf "/usr/share/info"
> 
> Therefore by disabling the sandbox protection, one will allow the ebuild to
> remove everything inside /usr/share/info.
> If you hit this issue please sync ASAP and do *not* disable sandbox.

Well didnt have much of a choice with that one as the system need to get built last weekend and the ebuild was stable in the tree.  I am guessing a complete tree rebuild is going to be necessary to reproduce /usr/share/info ... ?

[Comment 12 Jorge Manuel B. S. Vicetto (RETIRED) 2012-01-11 10:35:36 UTC]

There are probably other ways to do it, but you can use the following:

emerge -av1 $(grep -H /usr/share/info /var/db/pkg/*/*/CONTENTS | cut -f1 -d: | sed -e "s:^/var/db/pkg/::" -e "s:/CONTENTS$::" | sort -u | sed -e "s:^:=:")

*** This bug has been marked as a duplicate of bug 398025 ***