Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 282514 - dev-python/pygtk sandbox violation in packages using pygtk-codegen
Summary: dev-python/pygtk sandbox violation in packages using pygtk-codegen
Status: RESOLVED DUPLICATE of bug 288863
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] GNOME (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Linux Gnome Desktop Team
URL:
Whiteboard:
Keywords:
: 289077 289842 (view as bug list)
Depends on:
Blocks:
 
Reported: 2009-08-24 05:09 UTC by Yixun Lan
Modified: 2011-05-02 11:33 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
vte-0.20.5 build log (vte-build.log,72.88 KB, text/plain)
2009-08-24 05:11 UTC, Yixun Lan
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Yixun Lan archtester gentoo-dev 2009-08-24 05:09:39 UTC
when emerging vte-0.20.5, it will trigger sandbox ACCESS violation, so fail to install to system.

Reproducible: Always

Steps to Reproduce:
1. emerge =vte-0.20.5
2.
3.



Expected Results:  

S: dengnome-pty-helper.c:491: warning: ignoring return value of ‘fchown’, declared with attribute warn_unused_result
>>> Source compiled.
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-32432.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /dev/stderr
A: /dev/stderr
R: /dev/stderr
C: /bin/sh /usr/bin/pygtk-codegen-2.0 --register /usr/share/pygtk/2.0/defs/pango-types.defs --register /usr/share/pygtk/2.0/defs/gdk-types.defs --register /usr/share/pygtk/2.0/defs/gtk-types.defs --override vte.override --prefix pyvte vte.defs 

F: open_wr
S: deny
P: /dev/stderr
A: /dev/stderr
R: /dev/stderr
C: /bin/sh /usr/bin/pygtk-codegen-2.0 --register /usr/share/pygtk/2.0/defs/pango-types.defs --register /usr/share/pygtk/2.0/defs/gdk-types.defs --register /usr/share/pygtk/2.0/defs/gtk-types.defs --override vte.override --prefix pyvte vte.defs 
--------------------------------------------------------------------------------

>>> Failed to emerge x11-libs/vte-0.20.5, Log file:



emerge --info

Portage 2.2_rc38 (!../usr/portage/profiles/default/linux/x86/2008.0/desktop, gcc-4.4.1, glibc-2.10.1-r0, 2.6.31-rc5-git6 i686)
=================================================================
System uname: Linux-2.6.31-rc5-git6-i686-Intel-R-_Core-TM-2_Quad_CPU_Q8200_@_2.33GHz-with-gentoo-2.1.5
Timestamp of tree: Sun, 23 Aug 2009 06:00:01 +0000
app-shells/bash:     4.0_p28
dev-java/java-config: 1.3.7, 2.1.8-r1
dev-lang/python:     2.5.4-r2, 2.6.2-r1
sys-apps/baselayout: 2.1.5
sys-apps/openrc:     0.5.0-r2
sys-apps/sandbox:    2.0
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2, 1.11
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.29
ACCEPT_KEYWORDS="x86 ~x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/entropy /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/share/config/kdm/ /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/skel /etc/splash /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -march=pentium4 -pipe"
DISTDIR="/var/distfiles"
FEATURES="assume-digests collision-protect distlocks fixpackages parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="        ftp://192.168.95.128/   http://mirrors.163.com/gentoo  http://mirror.averse.net/pub/gentoo      http://ftp.twaren.net/Linux/Gentoo     "
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed"
LINGUAS="zh_CN en en_US"
MAKEOPTS="-j6 -s "
PKGDIR="/usr/portage-funtoo/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/build"
PORTDIR="/usr/portage-funtoo"
PORTDIR_OVERLAY="/usr/local/portage /usr/local/layman/sabayon /usr/local/layman/gentoo-china /usr/local/layman/x11 /usr/local/layman/enlightenment /usr/local/layman/openfree"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dfx 7Zip X a52 aac aalib accessibility acl acpi aiglx aim alsa artswrappersuid audiofile avahi bash-completion berkdb bidi branding bzip2 cairo cdda cddb cdr chm cjk cli config_wizard cpudetection cracklib crypt css cups dbox2 dbus dga dri dts dv dvb dvd dvdr dvdread dvi dxr3 emboss encode extramodules fam fame fat ffmpeg fftw firefox flac flash foomatic-db fortran freetype gcj gdbm gif gimpprint gnome gnutls gphoto2 gpm gs gsm gstreamer gtk hal hfs iconv icq ieee1394 imap inotify ipod ipv6 irc irda isdnlog jabber jack jfs jingle jpeg kde kdeenablefinal kdehiddenvisibility kdeprefix kerberos kickoff kipi lame lcd ldap libnotify live lj lm_sensors logitech-mouse lzo mad mail midi mjpeg mmx mng mozdevelop mp3 mp3rtp mpeg msn mudflap musepack musicbrainz ncurses network new-login nls nptl nptlonly nsplugin ntfs ogg openal openexr opengl openmp pam pcmcia pcre pda pdf perl png povray ppds pppd pulseaudio python qt3 qt3support qt4 quicktime quotas rar rdesktop readline reflection reiserfs rss scanner sdl session slp sms speex spell spl ssl startup-notification stream svg sysfs tcpd theora tiff tracker truetype udev unicode usb v4l v4l2 visualization voice vorbis weather wifi win32codecs wmf x264 x86 xcb xfs xine xinerama xml xorg xpm xprint xscreensaver xulrunner xv xvid xvmc yahoo zeroconf zlib" ALSA_CARDS="emu10k1x darla20 darla24 emu10k1 gina20 gina24 hdsp hdspm ice1712 indigo indigoio layla20 layla24 mia mixart mona pcxhr rme32 rme96 sb16 sbawe sscape usbusx2y vx222 usb-usx2y" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="prefork" CAMERAS="agfa_cl20 casio_qv dimagev dimera3500 kodak_dc120 kodak_dc210 kodak_dc240 kodak_dc3200 kodak_ez200 konica_qm150 panasonic_coolshot panasonic_dc1000 panasonic_dc1580 panasonic_l859 polaroid_pdc320 polaroid_pdc640 polaroid_pdc700 ricoh_g3 sipix_blink sipix_blink2 sipix_web2 sony_dscf1 sony_dscf55 toshiba_pdrm11 adc65 aox barbie canon clicksmart310 digigr8 digita directory enigma13 fuji gsmart300 hp215 iclick jamcam jd11 konica largan lg_gsm mars mustek pccam300 pccam600 ptp2 ricoh samsung sierra smal sonix soundvision spca50x sq905 stv0674 stv0680 sx330z template" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse void" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="zh_CN en en_US" LIRC_DEVICES="audio audio_alsa" USERLAND="GNU" VIDEO_CARDS="fbdev vesa intel virtualbox"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Yixun Lan archtester gentoo-dev 2009-08-24 05:11:55 UTC
Created attachment 202106 [details]
vte-0.20.5 build log
Comment 2 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-08-24 08:44:40 UTC
[31;01mACCESS DENIED[0m  open_wr:      /dev/stderr
/usr/bin/pygtk-codegen-2.0: line 7: /dev/stderr: Permission denied
[31;01mACCESS DENIED[0m  open_wr:      /dev/stderr
/usr/bin/pygtk-codegen-2.0: line 8: /dev/stderr: Permission denied

that one is funny. I wonder how we are going to fix that. What version of pygtk and pygobject do you have installed ?
Comment 3 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-08-26 20:27:59 UTC
please paste output of:
$ emerge -pv gtk+ glib pygobject pygtk vte

I don't get this error here, even using gcc-4.4. Also how do you do your emerge, using su, sudo, ... ?
Comment 4 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-09-06 11:56:30 UTC
Please get back to us.
Comment 5 Daniel Gryniewicz (RETIRED) gentoo-dev 2009-09-08 14:57:50 UTC
You'd think that lots of things need access to stderr?  Is this some kind of targeted build environment?
Comment 6 Jaco van der Schyff 2009-10-07 07:10:39 UTC
I had a similar problem when emerging app-portage/portage-utils.

./dotest: line 29: /dev/stderr: Permission denied
./dotest: line 30: /dev/stderr: Permission denied
./dotest: line 31: /dev/stderr: Permission denied

I managed to fix the problem by switching from the developer profile to the desktop profile.

# eselect profile list
Available profile symlink targets:
  [1]   default/linux/x86/10.0
  [2]   default/linux/x86/10.0/desktop *
  [3]   default/linux/x86/10.0/developer

Hope it helps....

- Jaco van der Schyff
Comment 7 Lars Schonert 2009-10-13 13:43:29 UTC
workarround:

USE="-doc -python" emerge vte
Comment 8 Lars Schonert 2009-10-13 13:51:13 UTC
mhm, the next stopper is dev-python/libwnck-python-2.26.0, also access violation /dev/stderr. i think it's a python-version-problem?

system here use 3.1 but the python-updater want downgrade to 2.6 ...
Comment 9 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-10-16 21:55:48 UTC
*** Bug 289077 has been marked as a duplicate of this bug. ***
Comment 10 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-10-16 21:57:32 UTC
@herd, I've see a few duplicates of it so place close as duplicate any similar issues against this bug.
Comment 11 Arfrever Frehtes Taifersar Arahesis (RETIRED) gentoo-dev 2009-10-16 22:37:20 UTC
It might be a duplicate of bug #288863.
Comment 12 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-10-17 14:19:25 UTC
indeed.

*** This bug has been marked as a duplicate of bug 288863 ***
Comment 13 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-10-20 10:15:51 UTC
*** Bug 289842 has been marked as a duplicate of this bug. ***
Comment 14 Kevin F. Quinn 2011-05-02 10:04:47 UTC
(In reply to comment #8)
> mhm, the next stopper is dev-python/libwnck-python-2.26.0, also access
> violation /dev/stderr. i think it's a python-version-problem?
> 
> system here use 3.1 but the python-updater want downgrade to 2.6 ...

I also saw this.  If a package uses /usr/bin/pygtk-codegen-2.0 (from dev-python/pygtk), it will fail because it'll try to write to /dev/stderr which is a sandbox violation.

The script reads:

----
#! /bin/sh

prefix=/usr
exec_prefix=${prefix}
pygobject_script=${exec_prefix}/bin/pygobject-codegen-2.0

echo "note: pygtk-codegen-2.0 is deprecated, use pygobject-codegen-2.0 instead"   > /dev/stderr
echo "note: I will now try to invoke pygobject-codegen-2.0 in the same directory" > /dev/stderr

exec $pygobject_script "$@"
----

where clearly the "echo" lines violate the sandbox.  Should be doing something like:

echo "blah" 1>&2

instead.