Bug 612002 – x11-libs/pango-1.40.4 : sandbox issue (XDG_xxx_DIR related)

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Toralf Förster 2017-03-07 20:40:18 UTC]

This issue is forced at the tinderbox by making:

export XDG_DESKTOP_DIR="/root/Desktop"
export XDG_DOCUMENTS_DIR="/root/Documents"
export XDG_DOWNLOAD_DIR="/root/Downloads"
export XDG_MUSIC_DIR="/root/Music"
export XDG_PICTURES_DIR="/root/Pictures"
export XDG_PUBLICSHARE_DIR="/root/Public"
export XDG_TEMPLATES_DIR="/root/Templates"
export XDG_VIDEOS_DIR="/root/Videos"
export XDG_RUNTIME_DIR="/root/run"
export XDG_CONFIG_HOME="/root/config"
export XDG_CACHE_HOME="/root/cache"
export XDG_DATA_HOME="/root/share"

pls see bug #567192 too

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkdir
S: deny

  -----------------------------------------------------------------

  This is an unstable amd64 chroot image (named desktop_20170305-211735) at a hardened host acting as a tinderbox.

  -----------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-5.4.0 *
llvm-config:
3.9.1
Available Python interpreters, in order of preference:
  [1]   python3.4
  [2]   python2.7 (fallback)
  [3]   pypy3 (fallback)
Available Ruby profiles:
  [1]   ruby21 (with Rubygems) *
java-config:
The following VMs are available for generation-2:
*)	IcedTea JDK 7.2.6.8 [icedtea-bin-7]
2)	IcedTea JDK 3.3.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-bin-7  system-vm
  [2]   icedtea-bin-8

[Comment 1 Toralf Förster 2017-03-07 20:40:22 UTC]

Created attachment 466290 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2017-03-07 20:40:25 UTC]

Created attachment 466292 [details]
config.log.tbz2

[Comment 3 Toralf Förster 2017-03-07 20:40:28 UTC]

Created attachment 466294 [details]
emerge-history.txt

[Comment 4 Toralf Förster 2017-03-07 20:40:31 UTC]

Created attachment 466296 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2017-03-07 20:40:34 UTC]

Created attachment 466298 [details]
sandbox-1772.log

[Comment 6 Toralf Förster 2017-03-07 20:40:37 UTC]

Created attachment 466300 [details]
x11-libs:pango-1.40.4:20170307-201514.log

[Comment 7 Roman Piták 2017-03-15 14:05:27 UTC]

Created attachment 467130 [details]
emerge --info

I have a similar problem

[Comment 8 Roman Piták 2017-03-15 14:06:45 UTC]

Created attachment 467132 [details]
/var/tmp/portage/x11-libs/pango-1.40.4/temp/build.log

[Comment 9 Uwe Haider 2017-04-03 08:49:05 UTC]

Created attachment 469026 [details]
the build log

[Comment 10 Uwe Haider 2017-04-03 08:49:55 UTC]

Created attachment 469028 [details]
sandbos - log

[Comment 11 Uwe Haider 2017-04-03 08:50:47 UTC]

Created attachment 469030 [details]
emerge --info

[Comment 12 Mart Raudsepp 2017-04-09 00:29:18 UTC]

When adding some src_prepare code, it seems I managed to chain up to "default" instead of gnome2_src_prepare, thus missing the XDG scrubbing. This should be fixed in 1.40.5 by not needing a custom src_prepare anymore.
I don't think it's important to fix the stable version for this. I plan for 1.40.5 to be called for stabilization earlier than 30 days, maybe in a week or two.

[Comment 13 Toralf Förster 2018-07-31 15:32:25 UTC]

got at the unstable amd64 chroot image 17.0-desktop-plasma_20180727-200801 this : sandbox issue (XDG_xxx_DIR related)

[Comment 14 Toralf Förster 2018-07-31 15:32:29 UTC]

Created attachment 541864 [details]
emerge-info.txt

[Comment 15 Toralf Förster 2018-07-31 15:32:32 UTC]

Created attachment 541866 [details]
emerge-history.txt

[Comment 16 Toralf Förster 2018-07-31 15:32:35 UTC]

Created attachment 541868 [details]
etc.portage.tbz2

[Comment 17 Toralf Förster 2018-07-31 15:32:38 UTC]

Created attachment 541870 [details]
logs.tbz2

[Comment 18 Toralf Förster 2018-07-31 15:32:41 UTC]

Created attachment 541872 [details]
sandbox-20742.log

[Comment 19 Toralf Förster 2018-07-31 15:32:44 UTC]

Created attachment 541874 [details]
x11-libs:pango-1.42.3:20180731-005056.log

[Comment 20 Gilles Dartiguelongue (RETIRED) 2018-10-15 10:09:42 UTC]

Newer pango ebuilds with fixed behavior have been stabilized. Closing.