| Summary: | dev-util/ccache-4.6 tries to write outside sandbox | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Matthew Smith <matthew> |
| Component: | Current packages | Assignee: | Gentoo Toolchain Maintainers <toolchain> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | ansla80, info, martin, sam |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| See Also: |
https://github.com/ccache/ccache/issues/1044 https://bugs.gentoo.org/show_bug.cgi?id=883799 |
||
| Whiteboard: | If hitting this: run FEATURES="-ccache" emerge -v1u dev-util/ccache | ||
| Package list: | Runtime testing required: | --- | |
| Attachments: | log | ||
Please apply the patch, cheers! I'd missed one didn't make it into the release. Sorry, I was testing with the wrong version. Applying ef2e922 did not actually fix the issue, and neither did reverting a0edd42. From looking at the git log these seem to be the only two relevant commits. (In reply to Matthew Smith from comment #2) > Sorry, I was testing with the wrong version. > > Applying ef2e922 did not actually fix the issue, and neither did reverting > a0edd42. From looking at the git log these seem to be the only two relevant > commits. Bleh. Please could you report upstream and rebase our old patch for it then? (Or I can do the latter later today?) pmask this version? (In reply to jospezial from comment #4) > pmask this version? No real need given the patch is trivial to rebase. I'm not able to commit right now but if I could, I'd do that rather than mask it. *** Bug 837380 has been marked as a duplicate of this bug. *** The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9767f9723c5c168a772653541283cb9065090c1e commit 9767f9723c5c168a772653541283cb9065090c1e Author: Sam James <sam@gentoo.org> AuthorDate: 2022-04-09 11:26:14 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-04-09 11:26:46 +0000 dev-util/ccache: restore /run-skip patch I still can't hit this but let's rebase the old patch given it makes sense for now. Closes: https://bugs.gentoo.org/837362 Bug: https://bugs.gentoo.org/837380 Signed-off-by: Sam James <sam@gentoo.org> dev-util/ccache/ccache-4.6.ebuild | 1 + .../ccache/files/ccache-4.6-avoid-run-user.patch | 28 ++++++++++++++++++++++ 2 files changed, 29 insertions(+) The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=035fe04cb6f6f041330ab7561bdd1dc7687343de commit 035fe04cb6f6f041330ab7561bdd1dc7687343de Author: Sam James <sam@gentoo.org> AuthorDate: 2022-04-09 11:27:15 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-04-09 11:27:54 +0000 dev-util/ccache: revbump for /run fix Thought I had! Fixes: 9767f9723c5c168a772653541283cb9065090c1e Bug: https://bugs.gentoo.org/837362 Bug: https://bugs.gentoo.org/837380 Signed-off-by: Sam James <sam@gentoo.org> dev-util/ccache/{ccache-4.6.ebuild => ccache-4.6-r1.ebuild} | 0 1 file changed, 0 insertions(+), 0 deletions(-) Perhaps this is worthy of a news article instructing how to temporarily disable ccache in order to be able to upgrade to the new revision? From the sandbox error it's not obvious that ccache is to blame for this. Created attachment 769694 [details]
log
Unfortunately this bug still have in 4.6-r1
*** Bug 837509 has been marked as a duplicate of this bug. *** *** Bug 837524 has been marked as a duplicate of this bug. *** (In reply to ArchFeh from comment #10) > Created attachment 769694 [details] > log > > Unfortunately this bug still have in 4.6-r1 You have to disable it first to re-emerge it. (In reply to Sam James from comment #13) > (In reply to ArchFeh from comment #10) > > Created attachment 769694 [details] > > log > > > > Unfortunately this bug still have in 4.6-r1 > > You have to disable it first to re-emerge it. Thanks. Fixed) I was stupid:D News item posted for review: https://archives.gentoo.org/gentoo-dev/message/41accef5cbb8f10ce922070e92ee253a The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=930b96b94ebad678ef11b1d8aa5fd8aa609f198f commit 930b96b94ebad678ef11b1d8aa5fd8aa609f198f Author: Sam James <sam@gentoo.org> AuthorDate: 2022-04-12 08:52:57 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-04-12 08:52:57 +0000 2022-04-12-ccache-4_6-sandbox: add news item Bug: https://bugs.gentoo.org/837362 Signed-off-by: Sam James <sam@gentoo.org> .../2022-04-12-ccache-4_6-sandbox.en.txt | 25 ++++++++++++++++++++++ 1 file changed, 25 insertions(+) |
After updating to ccache-4.6, there are many sandbox violations when it tries to create /run/user/portageuid/ccache-tmp. F: mkdir S: deny P: /run/user/250 A: /run/user/250 R: /run/user/250 C: x86_64-pc-linux-gnu-g++ -xc++ -E -v - The upstream commit that caused the issue (in 4.6) a0edd4294f6a5a2d3f0c7b01273736f975f250e1. Issue is fixed in commit ef2e922f9642f943199138447b29ec53fa63ea68 but has not made it into a new release yet.