Bug 678198

Summary:	app-text/libgepub-0.5.3 : sandbox issue (XDG_xxx_DIR related)
Product:	Gentoo Linux	Reporter:	Toralf Förster <toralf>
Component:	Current packages	Assignee:	Gentoo Linux Gnome Desktop Team <gnome>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	567192
Attachments:	emerge-info.txt app-text:libgepub-0.5.3:20190216-212225.log emerge-history.txt etc.portage.tbz2 logs.tbz2 sandbox-4.log

Description Toralf Förster gentoo-dev

2019-02-17 00:09:02 UTC

This issue is forced at the tinderbox (pls see bug #567192 too) by setting:

export XDG_DESKTOP_DIR="/root/Desktop"
export XDG_DOCUMENTS_DIR="/root/Documents"
export XDG_DOWNLOAD_DIR="/root/Downloads"
export XDG_MUSIC_DIR="/root/Music"
export XDG_PICTURES_DIR="/root/Pictures"
export XDG_PUBLICSHARE_DIR="/root/Public"
export XDG_TEMPLATES_DIR="/root/Templates"
export XDG_VIDEOS_DIR="/root/Videos"
export XDG_RUNTIME_DIR="/root/run"
export XDG_CONFIG_HOME="/root/config"
export XDG_CACHE_HOME="/root/cache"
export XDG_DATA_HOME="/root/share"

sandbox output:

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkdir
S: deny

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1-desktop-gnome_libressl_20190214-190945

  -------------------------------------------------------------------

  Please see the tracker bug for details.

gcc-config -l:
 [1] x86_64-pc-linux-gnu-8.2.0 *

Available Python interpreters, in order of preference:
  [1]   python3.6
  [2]   python2.7 (fallback)
  [3]   pypy3 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems)
  [2]   ruby25 (with Rubygems)
  [3]   ruby26 (with Rubygems) *

java-config:
The following VMs are available for generation-2:
1)	IcedTea JDK 3.10.0 [icedtea-8]
*)	IcedTea JDK 3.10.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-8 
  [2]   icedtea-bin-8  system-vm

emerge -qpvO app-text/libgepub
[ebuild  N    ] app-text/libgepub-0.5.3  USE="introspection"

Comment 1 Toralf Förster gentoo-dev

2019-02-17 00:09:05 UTC

Created attachment 565588 [details]
emerge-info.txt

Comment 2 Toralf Förster gentoo-dev

2019-02-17 00:09:08 UTC

Created attachment 565590 [details]
app-text:libgepub-0.5.3:20190216-212225.log

Comment 3 Toralf Förster gentoo-dev

2019-02-17 00:09:11 UTC

Created attachment 565592 [details]
emerge-history.txt

Comment 4 Toralf Förster gentoo-dev

2019-02-17 00:09:13 UTC

Created attachment 565594 [details]
etc.portage.tbz2

Comment 5 Toralf Förster gentoo-dev

2019-02-17 00:09:16 UTC

Created attachment 565596 [details]
logs.tbz2

Comment 6 Toralf Förster gentoo-dev

2019-02-17 00:09:19 UTC

Created attachment 565598 [details]
sandbox-4.log

Comment 7 Larry the Git Cow gentoo-dev

2019-02-17 11:34:46 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=10dd642dc992b2068ca5b8dd4aed0e29dd46e3a3

commit 10dd642dc992b2068ca5b8dd4aed0e29dd46e3a3
Author:     Mart Raudsepp <leio@gentoo.org>
AuthorDate: 2019-02-17 11:00:07 +0000
Commit:     Mart Raudsepp <leio@gentoo.org>
CommitDate: 2019-02-17 11:21:07 +0000

    app-text/libgepub: Fix potential sandbox issue
    
    Closes: https://bugs.gentoo.org/678198
    Package-Manager: Portage-2.3.52, Repoman-2.3.12
    Signed-off-by: Mart Raudsepp <leio@gentoo.org>

 app-text/libgepub/libgepub-0.5.3.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)