Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 646640

Summary: net-firewall/xtables-addons with >=kernel-4.15 - sandbox violation in /usr/src/linux/null.dwo by objcopy --extract-dwo /var/tmp/portage/net-firewall/xtables-addons-2.13/temp/ccy6PMI9.o null.dwo
Product: Gentoo Linux Reporter: Marcin Mirosław <bug>
Component: EclassesAssignee: Anthony Basile <blueness>
Status: RESOLVED FIXED    
Severity: normal CC: nelo
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 653286    
Bug Blocks:    
Attachments: xtables-addons_build.log
xtables-addons_config.log
sys-kernel/spl_build.log

Description Marcin Mirosław 2018-02-05 08:21:18 UTC 
I can't build any kernel module with kernel>=4.15 , I tried spl, zfs-kmod and xtables-addons without success.

>>> Source configured.
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-4348.log"
 *
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: unlink
S: deny
P: null.dwo
A: /usr/src/linux/null.dwo
R: /usr/src/linux/null.dwo
C: /usr/lib/gcc/x86_64-pc-linux-gnu/6.4.0/../../../../x86_64-pc-linux-gnu/bin/objcopy --extract-dwo /var/tmp/portage/net-firewall/xtables-addons-2.13/temp/ccy6PMI9.o null.dwo

F: fopen_wr
S: deny
P: null.dwo
A: /usr/src/linux/null.dwo
R: /usr/src/linux/null.dwo
C: /usr/lib/gcc/x86_64-pc-linux-gnu/6.4.0/../../../../x86_64-pc-linux-gnu/bin/objcopy --extract-dwo /var/tmp/portage/net-firewall/xtables-addons-2.13/temp/ccy6PMI9.o null.dwo

F: unlink
S: deny
P: null.dwo
A: /usr/src/linux/null.dwo
R: /usr/src/linux/null.dwo
C: /usr/lib/gcc/x86_64-pc-linux-gnu/6.4.0/../../../../x86_64-pc-linux-gnu/bin/objcopy --extract-dwo /var/tmp/portage/net-firewall/xtables-addons-2.13/temp/ccy6PMI9.o null.dwo
 * --------------------------------------------------------------------------------

>>> Failed to emerge net-firewall/xtables-addons-2.13, Log file:


Reproducible: Always




Portage 2.3.19 (python 3.5.4-final-0, default/linux/amd64/17.0/no-multilib/hardened, gcc-6.4.0, glibc-2.25-r9, 4.15.0+ x86_64)
=================================================================
System uname: Linux-4.15.0+-x86_64-Intel-R-_Xeon-R-_CPU_E5-2630_v2_@_2.60GHz-with-gentoo-2.4.1
KiB Mem:     1017228 total,     61464 free
KiB Swap:    1433596 total,   1215100 free
Timestamp of repository gentoo: Mon, 05 Feb 2018 07:30:01 +0000
Head commit of repository gentoo: 59872b32e9d93504b9fcb5c4f690eb6fa6e6adbc
sh bash 4.4_p12
ld GNU ld (Gentoo 2.29.1 p3) 2.29.1
ccache version 3.3.4 [enabled]
app-shells/bash:          4.4_p12::gentoo
dev-lang/perl:            5.24.3::gentoo
dev-lang/python:          2.7.14-r1::gentoo, 3.5.4-r1::gentoo
dev-util/ccache:          3.3.4-r1::gentoo
dev-util/cmake:           3.9.6::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r2::gentoo
sys-apps/openrc:          0.34.11::gentoo
sys-apps/sandbox:         2.12::gentoo
sys-devel/autoconf:       2.69-r4::gentoo
sys-devel/automake:       1.15.1-r1::gentoo
sys-devel/binutils:       2.29.1-r1::gentoo
sys-devel/gcc:            6.4.0-r1::gentoo, 7.3.0::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r3::gentoo
sys-devel/make:           4.2.1::gentoo
sys-kernel/linux-headers: 4.13::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25-r9::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-extra-opts: -O

Installed sets: @masscheck, @nagios-plugins, @sheepdog
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=westmere -mtune=native    -fno-unwind-tables -fno-asynchronous-unwind-tables -fuse-linker-plugin -s    -ftracer    -fuse-ld=gold -fvar-tracking-assignments"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.0/ext-active/ /etc/php/apache2-php7.1/ext-active/ /etc/php/cgi-php7.0/ext-active/ /etc/php/cgi-php7.1/ext-active/ /etc/php/cli-php7.0/ext-active/ /etc/php/cli-php7.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe -march=westmere -mtune=native    -fno-unwind-tables -fno-asynchronous-unwind-tables -fuse-linker-plugin -s    -ftracer    -fuse-ld=gold -fvar-tracking-assignments"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe -march=westmere -mtune=native    -fno-unwind-tables -fno-asynchronous-unwind-tables -fuse-linker-plugin -s    -ftracer    -fuse-ld=gold -fvar-tracking-assignments"
FEATURES="assume-digests binpkg-logs ccache cgroup collision-protect compressdebug config-protect-if-modified distlocks ebuild-locks fixlafiles multilib-strict news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms splitdebug strict unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe -march=westmere -mtune=native    -fno-unwind-tables -fno-asynchronous-unwind-tables -fuse-linker-plugin -s    -ftracer    -fuse-ld=gold -fvar-tracking-assignments"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="pl_PL.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--sort-common"
LINGUAS="en"
MAKEOPTS="-j2 -l3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="-O"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="acl aio amd64 apache2 bash-completion bzip2 caps crypt cxx hardened iconv idn ipv6 jit lto modules nano-syntax ncurses nls nptl openmp pcre pie readline seccomp smp ssl ssp threads unicode vhosts vim-syntax xattr xtpax zlib" ABI_X86="64" APACHE2_MODULES="alias authn_core access_compat auth_basic authz_core authn_alias authn_anon auth_digest authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cgi dav dav_fs dav_lock dir env expires ext_filter filter headers hugepages include info log_config logio mime mime_magic negotiation remoteip rewrite setenvif status unique_id unixd socache_shmcb usertrack vhost_alias" APACHE2_MPMS="itk" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="apache aggregation bind cgroups conntrack contextswitch cpu curl curl_json df disk dns email entropy ethstat exec filecount interface iptables irq lvm match_regex mysql netlink load memory network nginx notify_email ntpd openvpn ping postgresql processes protocols rrdcached rrdtool snmp statsd swap syslog tail tail_csv tcpconns unixsock uptime vmem" CPU_FLAGS_X86="aes mmx mmxext sse sse2 sse3 ssse3" ELIBC="glibc" GRUB_PLATFORMS="pc" KERNEL="linux" L10N="en" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" NGINX_MODULES_HTTP="access browser charset gzip map limit_zone proxy rewrite http2 stub_status gzip_static" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-0 php7-1" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_5" PYTHON_TARGETS="python2_7 python3_5" RUBY_TARGETS="ruby21" USERLAND="GNU" XTABLES_ADDONS="fuzzy geoip lscan psd sysrq tarpit"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS
Comment 1 Marcin Mirosław 2018-02-05 08:23:30 UTC 
Created attachment 517842 [details]
xtables-addons_build.log
Comment 2 Marcin Mirosław 2018-02-05 08:24:32 UTC 
Created attachment 517844 [details]
xtables-addons_config.log
Comment 3 Marcin Mirosław 2018-02-05 10:40:48 UTC 
Created attachment 517850 [details]
sys-kernel/spl_build.log
Comment 4 Georgy Yakovlev archtester gentoo-dev 2018-04-16 05:32:25 UTC 
It's failing because of CONFIG_DEBUG_INFO_SPLIT in the kernel config. try disabling that.

I'm currently working on linux-mod.eclass and can look at the issue a bit deeper, seems it needs some patching or sandbox massage.
Comment 5 Georgy Yakovlev archtester gentoo-dev 2018-04-16 05:47:43 UTC 
this bug should depend on https://bugs.gentoo.org/653286
Comment 6 Marcin Mirosław 2018-04-16 08:39:44 UTC 
(In reply to Georgy Yakovlev from comment #4)
> It's failing because of CONFIG_DEBUG_INFO_SPLIT in the kernel config. try
> disabling that.

Thanks Georgy for information, I was wondering why so few people has that problem now I know:)