Summary: | dev-php/theseer-Autoload-1.26.0-r2: sandbox access violation | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | segmentation fault <segmentation-fault> |
Component: | Current packages | Assignee: | PHP Bugs <php-bugs> |
Status: | RESOLVED DUPLICATE | ||
Severity: | normal | CC: | jstein |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: | build.log |
Description
segmentation fault
2022-02-15 21:25:13 UTC
Created attachment 765211 [details]
build.log
*** This bug has been marked as a duplicate of bug 249496 *** So this bug was "resolved" as duplicate of an unresolved bug. Hmm... I tried to research this a bit, but I am not sure what to think of it: It seems that other PHP scripts trigger it - composer triggered it 8 years ago: https://stackoverflow.com/questions/18841041/composer-installed-net-snmp Here it is triggered by the "phpab.php" script: ...portage/dev-php/theseer-Autoload-1.26.0-r2/work/Autoload-1.26.0/phpab.php Looking there, there are just two lines $factory = new \TheSeer\Autoload\Factory(); $factory->getCLI()->run(); I would suspect the PHP CLI, but I have ; The MIBS data available in the PHP distribution must be installed. ; See http://www.php.net/manual/en/snmp.installation.php ;extension=snmp in the php.ini of the CLI, i.e. SNMP is disabled for PHP. On the other side php-config shows --with-snmp=/usr ...and php has the 'snmp' USE flag set. But the daemon is not running: /etc/init.d/snmpd status * status: stopped Clearly, either PHP CLI, or theseer-Autoload try to access SNMP functionality, even in the case this is clearly disabled/not available/not running. This is unfortunate, but probably hard to fix in a distribution. So what would you suggest as a workaround: - Disable the 'snmp' USE flag for all PHP slots, remerge them and retry? - Disable the 'snmp' USE flag globally - this will cause rebuilds for: dev-lang/php-XX app-admin/syslog-ng media-gfx/sane-backends net-analyzer/nagios-plugins net-analyzer/openvas-scanner and then depclean net-snmp alltogether: emerge -av --depclean net-analyzer/net-snmp and retry? - Add /var/lib/net-snmp/mib_indexes to the SANDBOX_WRITE variable in, say /etc/sandbox.d/00default thus allowing the write operation to /var/lib/net-snmp/mib_indexes/0 - at least for the time of merging (one can take it back afterwards)? If this is harmless from a security point of view (as it seems to be), then personally I tend to the latter solution. What is your opinion? |