Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 756211

Summary: app-crypt/tpm2-tss-2.4.3 sandbox violation $ROOT/usr/share/aclocal/ax_ac_append_to_file.m4 when $ROOT != /
Product: Gentoo Linux Reporter: phkb <phkbphkbphkb>
Component: Current packagesAssignee: Christopher Byrne <salah.coronya>
Status: RESOLVED FIXED    
Severity: normal CC: jstein, proxy-maint, sam
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://bugs.gentoo.org/show_bug.cgi?id=677002
https://bugs.gentoo.org/show_bug.cgi?id=724318
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 738918    
Bug Blocks:    
Attachments: tpm2-tss build.log
powertop build.log
aclocal.out
Fix possible missing BDEPEND on autotools-archive

Description phkb 2020-11-23 11:01:09 UTC
When building a system in a separate root for another machine, two packages failed to build due to sandbox violations, triggered by "autotools_run_tool --at-m4flags aclocal -I m4 --install" in eautoreconf.
Comment 1 phkb 2020-11-23 11:02:23 UTC
Created attachment 674452 [details]
tpm2-tss build.log
Comment 2 phkb 2020-11-23 11:03:07 UTC
Created attachment 674455 [details]
powertop build.log
Comment 3 Jonas Stein gentoo-dev 2020-11-29 12:30:58 UTC
we need one ticket per package. Please create a new ticket for the other package(s)
Comment 4 Christopher Byrne 2020-11-29 22:28:29 UTC
I tried doing this setting ROOT to an empty root directory but I cannot replicate - it compiles just fine, no sandbox warning. Do you have a copy of var/tmp/portage/app-crypt/tpm2-tss-2.4.3/temp/aclocal.out ?
Comment 5 phkb 2020-11-30 00:09:34 UTC
Created attachment 675793 [details]
aclocal.out
Comment 6 Christopher Byrne 2020-11-30 04:02:48 UTC
Created attachment 675802 [details, diff]
Fix possible missing BDEPEND on autotools-archive

I still can't replicate it but I have an idea what might be wrong. Try patching the app-crypt/tpm2-tss-2.4.3.ebuild file with the following patch which adds a possible missing build dependency.
Comment 7 phkb 2020-11-30 23:12:52 UTC
I did the edit, nothing changed. Indeed, I already have autotools-archive installed in /. I don't have it installed in $ROOT, but manually installing it there did not solve the bug either.
Comment 8 Christopher Byrne 2021-08-26 04:29:14 UTC
I can replicate this by having with a cross-compile by having autotools-archive on CBUILD (host) but not in CHOST (target).  Both 2.4.6 and 3.1.0 have the same problem. 

Now that I can replicate it, after looking at the man page for aclocal, I think I know what the problem is. The problem is the way aclocal is invoked: 

aclocal -I /var/thinkpadT430s/usr/share/aclocal -I m4 --install

--install "copies third-party files to the first -I directory". Unfortunately, that's $ROOT/usr/share/aclocal and not m4. The -I arguments need to be reversed.
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-02-19 03:25:40 UTC
Fixed by the autotools.eclass changes in linked bug.