Bug 829786

Summary:	net-dns/openresolv: /var/run/resolv.conf is not world readable
Product:	Gentoo Linux	Reporter:	Martin Mokrejš <mmokrejs>
Component:	Current packages	Assignee:	Ben Kohler <bkohler>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	sam
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Martin Mokrejš 2021-12-22 00:25:22 UTC

Hi,
  I just spent 3 hours recompiling all kinds of apps trying to figure out why my e.g webbrowser cannot resolve names to IP addresses. In the end, emerge could not download files via wget either but manually downloading running wget on the URL worked (under root).

  It boiled down to this:

# ls -altr /var/run/resolv.conf
-rw------- 1 root root 111 Dec 21 23:40 /var/run/resolv.conf
#

  All apps running under non-root user are broken due to that.

# emerge -pv networkmanager openresolv

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] net-dns/openresolv-3.12.0::gentoo  USE="(-selinux)" 0 KiB
[ebuild   R    ] net-misc/networkmanager-1.32.12-r1::gentoo  USE="bluetooth concheck elogind gtk-doc introspection modemmanager nss policykit ppp resolvconf syslog tools wifi -audit -connection-sharing -debug -dhclient -dhcpcd -gnutls -iptables -iwd -lto -nftables -ofono -ovs -psl (-selinux) -systemd -teamd -test -vala -wext" 0 KiB

# emerge --info
Portage 3.0.28 (python 3.9.7-final-0, default/linux/amd64/17.1/no-multilib, gcc-11.2.0, glibc-2.33-r1, 5.4.167 x86_64)
=================================================================
System uname: Linux-5.4.167-x86_64-Intel-R-_Core-TM-_i7-7820HQ_CPU_@_2.90GHz-with-glibc2.33
KiB Mem:    32813724 total,  20098580 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Tue, 21 Dec 2021 19:30:01 +0000
Head commit of repository gentoo: 1dba32c6c3436924b55e2352d16b04430110c2f8
Head commit of repository randall: 1878db2875a45dfa0a8c37a1f38035da7deb5cbc

sh bash 5.1_p8
ld GNU ld (Gentoo 2.37_p1 p0) 2.37
app-misc/pax-utils:        1.3.3::gentoo
app-shells/bash:           5.1_p8::gentoo
dev-java/java-config:      2.3.1::gentoo
dev-lang/perl:             5.34.0-r5::gentoo
dev-lang/python:           2.7.18_p106::stefantalpalaru, 3.6.15::gentoo, 3.7.12_p1::gentoo, 3.8.12_p1::gentoo, 3.9.7_p1::gentoo
dev-lang/rust:             1.54.0::gentoo
dev-util/cmake:            3.21.4::gentoo
dev-util/meson:            0.59.2::gentoo
sys-apps/baselayout:       2.8::gentoo
sys-apps/openrc:           0.44.10::gentoo
sys-apps/sandbox:          2.29::gentoo
sys-devel/autoconf:        2.13-r1::gentoo, 2.69-r5::gentoo, 2.71-r1::gentoo
sys-devel/automake:        1.11.6-r3::gentoo, 1.13.4-r2::gentoo, 1.14.1-r2::gentoo, 1.15.1-r2::gentoo, 1.16.5::gentoo
sys-devel/binutils:        2.32-r1::gentoo, 2.33.1-r1::gentoo, 2.34-r2::gentoo, 2.35.2::gentoo, 2.36.1-r2::gentoo, 2.37_p1::gentoo
sys-devel/binutils-config: 5.4::gentoo
sys-devel/clang:           9.0.1::gentoo, 10.0.0::gentoo, 11.0.0::gentoo, 12.0.0-r1::gentoo, 13.0.0::gentoo
sys-devel/gcc:             9.3.0-r2::gentoo, 10.3.0::gentoo, 11.2.0::gentoo
sys-devel/gcc-config:      2.4::gentoo
sys-devel/libtool:         2.4.6-r6::gentoo
sys-devel/lld:             13.0.0::gentoo
sys-devel/llvm:            7.1.0::gentoo, 9.0.1::gentoo, 10.0.1::gentoo, 11.0.0::gentoo, 12.0.0::gentoo, 13.0.0::gentoo
sys-devel/make:            4.3::gentoo
sys-kernel/linux-headers:  5.14::gentoo (virtual/os-headers)
sys-libs/glibc:            2.33-r1::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-extra-opts: 
    sync-rsync-verify-jobs: 1
    sync-rsync-verify-metamanifest: yes
    sync-rsync-verify-max-age: 24

randall
    location: /var/db/repos/randall
    sync-type: git
    sync-uri: https://github.com/ran-dall/portage-overlay
    masters: gentoo

science
    location: /mnt/large/home/mmokrejs/proj/sci
    masters: gentoo
    priority: 0

x-portage
    location: /usr/local/portage
    masters: gentoo
    priority: 1

layman
    location: /var/lib/layman
    masters: gentoo
    priority: 2

stefantalpalaru
    location: /var/lib/layman/stefantalpalaru
    masters: gentoo
    priority: 50

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="@FREE dlj-1.1 sun-bcla-java-vm Oracle-BCLA-JavaSE IBM-J1.6 NPSL Nero-EULA-US AdobeFlash-10.3 AdobeFlash-11.x OPERA-2014 RAR Intel-SDP intel-ucode Skype-TOS vmware linux-firmware fasta vienna-rna unafold GRL MSttfEULA hplip-plugin meme mRNAmarkup ApE ICS ipw3945 finchtv modeller gmap master-pdf-editor abyss swiss-prot Aladdin AVASYS truecrypt-3.0 pyvcf Non-profit-OSL-3.0 estscan bcca_2010 oncotator Adobe blat staden CeCILL-1.1 phrap STRIDE cctbx-2.0 bh-luxi ARIADNE unRAR all-rights-reserved trf annovar_personal_only stampy-academic BSD-BroadInstitute UPennState freedist free-noncomm blasr sun-jlfgr FLI-Jena PSTT netperf sun-jsr67 xv vim.org OSGi-Specification-2.0 colt mod_fastcgi googleearth google-chrome ACE AFL churchill genscan no-source-code linux-fw-redistributable ISSL JSON MPEG-4 Apache-2.0 BSD MIT BSD-2 FSFAP unicode Subversion OPERA-2018 ms-teams-pre TeamViewer PSF-2.4"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native -ftree-vectorize"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/stunnel/stunnel.conf /usr/lib64/libreoffice/program/sofficerc /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.3/conf /usr/share/maven-bin-3.6/conf /usr/share/maven-bin-3.8/conf /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.0/ext-active/ /etc/php/cgi-php8.0/ext-active/ /etc/php/cli-php8.0/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/vmware-installer"
CXXFLAGS="-O2 -pipe -march=native -ftree-vectorize"
DISTDIR="/usr/portage/distfiles"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-O2 -pipe -march=native -ftree-vectorize"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news nostrip parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe -march=native -ftree-vectorize"
GENTOO_MIRRORS="http://ftp.fi.muni.cz/pub/linux/gentoo/ http://gentoo.mirror.web4u.cz/ rsync://gentoo.mirror.dkm.cz/gentoo/ ftp://gentoo.mirror.web4u.cz/"
LANG="en_US"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en_US en_GB en cs"
MAKEOPTS="-j5"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp/portage"
SHELL="/bin/bash"
USE="X aac acl acpi alsa amd64 amr apache apache2 asm avx avx2 berkdb bluetooth boost bzip2 cairo caps cdda cdr cgi cli coin cracklib crypt cryptlib cryptsetup cups dbus device-mapper dhcp directfb dri dri3 drm dvd dvda elogind emboss encode eselect-ldso fax fbcon ffmpeg flac fontconfig fortran gbm gcrypt gd gdbm geoip geolocation gimp glpk gmp gnutls gpm gps gtk hal hpijs hwdb iconv id3tag imaging innodb inotify java javafx javascript jce jpeg jpg js jscript keymap ladspa lapack laptop lcms libglvnd libnotify libtirpc lm_sensors lz4 mad mariadb matroska mmx modemmanager mp3 ncurses nfs nls nptl nptlonly nscd nss ntfsprogs objc ocr ogg opengl openh264 openmp openssl opus pam parport pbs pcre pcre16 pcsc-lite pdf perl php png policykit polkit ppds pppd python qt3support qt4 qt5 readline rendering resolvconf romio scanner sctp seccomp server session sha slideshow smartcard sndfile split-usr sqlite sse sse2 sse3 sse4_1 sse4_2 ssl sslv3 ssse3 startup-notification suexec svg syslog tcl tcpd threads tiff tk truetype twolame udev unicode usb v4l v4l2 vaapi vim-syntax vnc vorbis wavpack wifi x11 x264 x265 xattr xcb xml xorg xrandr xv xvid xvmc zlib" ABI_X86="64" ADA_TARGET="gnat_2020" ALSA_CARDS="hdspm usb-usx2y" APACHE2_MODULES="alias authz_host auth_basic auth_digest cgi cgid deflate dir env filter include info mem_cache mime mime_magic negotiation remoteip setenvif status userdir vhost_alias rewrite usertrack cache file_cache disk_cache charset_lite log_config log_forensic" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="gpsclock navcom ntrip rtcm104v2 rtcm104v3 ublox nmea0183 nmea2000 aivdm passthrough" GRUB_PLATFORMS="efi-64 pc" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en-US en-GB en cs" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" OPENMPI_RM="pbs" PHP_TARGETS="php5-4 php5-5" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_8" PYTHON_TARGETS="python2_7 python3_7 python3_8 python3_9 pypy3" RUBY_TARGETS="ruby27 ruby30" USERLAND="GNU" VIDEO_CARDS="vesa vmware fbdev intel i915 i965 iris" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LEX, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS



The original errors were like:

>>> Emerging (1 of 1) net-misc/curl-7.80.0::gentoo
>>> Downloading 'http://ftp.fi.muni.cz/pub/linux/gentoo/distfiles/47/curl-7.80.0.tar.xz'
--2021-12-22 00:59:49--  http://ftp.fi.muni.cz/pub/linux/gentoo/distfiles/47/curl-7.80.0.tar.xz
Resolving ftp.fi.muni.cz... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'ftp.fi.muni.cz'
>>> Downloading 'http://gentoo.mirror.web4u.cz/distfiles/layout.conf'
--2021-12-22 00:59:49--  http://gentoo.mirror.web4u.cz/distfiles/layout.conf
Resolving gentoo.mirror.web4u.cz... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'gentoo.mirror.web4u.cz'
!!! Couldn't download '.layout.conf.gentoo.mirror.web4u.cz'. Aborting.
>>> Downloading 'http://gentoo.mirror.web4u.cz/distfiles/curl-7.80.0.tar.xz'
--2021-12-22 00:59:49--  http://gentoo.mirror.web4u.cz/distfiles/curl-7.80.0.tar.xz
Resolving gentoo.mirror.web4u.cz... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'gentoo.mirror.web4u.cz'
>>> Downloading 'rsync://gentoo.mirror.dkm.cz/gentoo/distfiles/layout.conf'
rsync: getaddrinfo: gentoo.mirror.dkm.cz 873: Temporary failure in name resolution
rsync error: error in socket IO (code 10) at clientserver.c(137) [Receiver=3.2.3]
No digest file available and download failed.

!!! Couldn't download '.layout.conf.gentoo.mirror.dkm.cz'. Aborting.
>>> Downloading 'rsync://gentoo.mirror.dkm.cz/gentoo/distfiles/curl-7.80.0.tar.xz'
rsync: getaddrinfo: gentoo.mirror.dkm.cz 873: Temporary failure in name resolution
rsync error: error in socket IO (code 10) at clientserver.c(137) [Receiver=3.2.3]
>>> Downloading 'ftp://gentoo.mirror.web4u.cz/distfiles/layout.conf'
pathconf: Permission denied
--2021-12-22 00:59:49--  ftp://gentoo.mirror.web4u.cz/distfiles/layout.conf
           => '/usr/portage/distfiles/.layout.conf.gentoo.mirror.web4u.cz.__download__'
Resolving gentoo.mirror.web4u.cz... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'gentoo.mirror.web4u.cz'
!!! Couldn't download '.layout.conf.gentoo.mirror.web4u.cz'. Aborting.
>>> Downloading 'ftp://gentoo.mirror.web4u.cz/distfiles/curl-7.80.0.tar.xz'
pathconf: Permission denied
--2021-12-22 00:59:49--  ftp://gentoo.mirror.web4u.cz/distfiles/curl-7.80.0.tar.xz
           => '/usr/portage/distfiles/curl-7.80.0.tar.xz.__download__'
Resolving gentoo.mirror.web4u.cz... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'gentoo.mirror.web4u.cz'
>>> Downloading 'https://curl.haxx.se/download/curl-7.80.0.tar.xz'
--2021-12-22 00:59:49--  https://curl.haxx.se/download/curl-7.80.0.tar.xz
SSL_INIT
Resolving curl.haxx.se... failed: Temporary failure in name resolution.
wget: unable to resolve host address 'curl.haxx.se'
!!! Couldn't download 'curl-7.80.0.tar.xz'. Aborting.
 * Fetch failed for 'net-misc/curl-7.80.0', Log file:
 *  '/var/tmp/portage/portage/net-misc/curl-7.80.0/temp/build.log'

Comment 1 Sam James archtester

2021-12-22 04:02:42 UTC

Think this is openresolv specific.

(Aside: ... are you depcleaning after world upgrades? you have a lot of obsolete things installed.)