Bug 686764

Summary:	dev-lang/perl-5.28.2-r1: sandbox access violation with mounted /sys/firmware/efi/efivars
Product:	Gentoo Linux	Reporter:	Michael Hofmann <bugs>
Component:	Current packages	Assignee:	Gentoo Perl team <perl>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=717302
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	build.log emerge --info

Description Michael Hofmann 2019-05-25 21:26:22 UTC

I'm not sure if this a bug or a misconfigured machine of a user. 

The user reported that he has mounted /sys/firmware/efi/efivars and that he gets the error below when he emerges dev-lang/perl-5.28.2-r1:

Below is the error message. See https://forums.gentoo.org/viewtopic-t-1097170.html for details.

 * ------------- ACCESS VIOLATION SUMMARY --------------
 * LOG FILE: "/var/log/sandbox/sandbox-4.log"
 *
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /sys/firmware/efi/efivars/BootNext-8be4df61-93ca-11d2-aa0d-00e098032b8c
A: /sys/firmware/efi/efivars/BootNext-8be4df61-93ca-11d2-aa0d-00e098032b8c
R: /sys/firmware/efi/efivars/BootNext-8be4df61-93ca-11d2-aa0d-00e098032b8c
C: efibootmgr -n 0006

F: unlink
S: deny
P: /run/systemd/reboot-param
A: /run/systemd/reboot-param
R: /run/systemd/reboot-param
C: reboot
 * ------------------------------------

Comment 1 Andreas K. Hüttel archtester

2019-05-26 10:04:11 UTC

Please attach the full build log... the sandbox output unfortunately does not tell us what causes the problem.

Comment 2 Andreas 2019-05-29 21:53:56 UTC

Created attachment 578026 [details]
build.log

Comment 3 Andreas 2019-05-29 21:55:13 UTC

From Openrc
Do you need the build log from systemd also?
The errors are identical...

Comment 4 Michael Hofmann 2019-05-30 18:06:43 UTC

Created attachment 578114 [details]
emerge --info

emerge --info (from the machine with the sandbox error, copied from the Gentoo forum thread)

Comment 5 Andreas K. Hüttel archtester

2019-10-13 02:17:49 UTC

Now this is seriously weird. From the configure phase log:

ldexpl() found.
Checking to see how big your long doubles are...
Checking the kind of long doubles you have...
You have x86 80-bit little endian long doubles.
ERROR: ld.so: object 'libsandbox.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.
mount: only root can use "--options" option
 * ACCESS DENIED:  open_wr:      /sys/firmware/efi/efivars/BootNext-8be4df61-93ca-11d2-aa0d-00e098032b8c
Could not set BootNext: Permission denied
reboot: must be superuser.
What is your architecture name [x86_64-linux]  
Add the Perl API version to your archname? [n]  
This architecture is naturally 64-bit, not changing architecture name.
Pathname where the public executables will reside? (~name ok) [/usr/bin]

Comment 6 Sergei Trofimovich (RETIRED) gentoo-dev

2020-04-13 12:02:52 UTC

I noticed it's the same user in bug #717302 which we just nailed down to 'ef' alias in bashrc. Closing as a duplicate of a newer bug.

*** This bug has been marked as a duplicate of bug 717302 ***