Created attachment 357382 [details] app-editors:emacs-24.3-r2:20130830-031920.log.gz I'm getting a sandbox violation when emerging emacs with USE=X. >>> Completed installing emacs-24.3-r2 into /gentoo/tmp/portage/app-editors/emacs-24.3-r2/image/ (null)*(null) --------------------------- ACCESS VIOLATION SUMMARY --------------------------- (null)*(null) LOG FILE: "/var/log/sandbox/sandbox-5010.log" (null)*(null) VERSION 1.0 FORMAT: F - Function called FORMAT: S - Access Status FORMAT: P - Path as passed to function FORMAT: A - Absolute Path (not canonical) FORMAT: R - Canonical Path FORMAT: C - Command Line F: open_wr S: deny P: /dev/dri/card0 A: /dev/dri/card0 R: /dev/dri/card0 C: ../src/emacs -batch --no-site-file --no-site-lisp -l /gentoo/tmp/portage/app-editors/emacs-24.3-r2/work/emacs-24.3/lib-src/../lisp/mail/blessmail.el F: open_wr S: deny P: /dev/dri/card0 A: /dev/dri/card0 R: /dev/dri/card0 C: ../src/emacs -batch --no-site-file --no-site-lisp -l /gentoo/tmp/portage/app-editors/emacs-24.3-r2/work/emacs-24.3/lib-src/../lisp/mail/blessmail.el F: open_wr S: deny P: /dev/dri/card0 A: /dev/dri/card0 R: /dev/dri/card0 C: ./src/emacs --version F: open_wr S: deny P: /dev/dri/card0 A: /dev/dri/card0 R: /dev/dri/card0 C: ./src/emacs --version (null)*(null) -------------------------------------------------------------------------------- emerge --info =app-editors/emacs-24.3-r2::gentoo Portage 2.2.1 (default/linux/amd64/13.0/desktop/kde, gcc-4.7.3, glibc-2.17, 3.10.9-gentoo x86_64) ================================================================= System Settings ================================================================= System uname: Linux-3.10.9-gentoo-x86_64-AMD_Phenom-tm-_II_X6_1055T_Processor-with-gentoo-2.2 KiB Mem: 8165304 total, 683380 free KiB Swap: 10491892 total, 8884296 free Timestamp of tree: Fri, 30 Aug 2013 02:15:01 +0000 ld GNU ld (GNU Binutils) 2.23.2 ccache version 3.1.9 [disabled] app-shells/bash: 4.2_p45 dev-java/java-config: 2.2.0 dev-lang/python: 2.7.5-r2, 3.3.2-r2 dev-util/ccache: 3.1.9-r2::science dev-util/cmake: 2.8.11.1 dev-util/pkgconfig: 0.28 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.12 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.10.3, 1.11.6, 1.12.6, 1.13.4, 1.14 sys-devel/binutils: 2.23.2 sys-devel/gcc: 4.7.3 sys-devel/gcc-config: 1.8 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r4 sys-kernel/linux-headers: 3.10 (virtual/os-headers) sys-libs/glibc: 2.17 Repositories: gentoo zeekec x11 sunrise science megacoffee kde ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -mtune=native -march=native -O2" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -pipe -mtune=native -march=native -O2" DISTDIR="/gentoo/portage/distfiles" EMERGE_DEFAULT_OPTS="--keep-going -j 3 --backtrack=1000" FCFLAGS="-O2 -pipe -mtune=native -march=native -O2" FEATURES="assume-digests binpkg-logs candy clean-logs collision-protect compress-build-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe -mtune=native -march=native -O2" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--sort-common -Wl,--enable-new-dtags -Wl,--hash-style=gnu" MAKEOPTS="-j6 --load-average=18" PKGDIR="/gentoo/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_EXTRA_OPTS="-i --no-p --omit-dir-times" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/gentoo/tmp" PORTDIR="/gentoo/portage" PORTDIR_OVERLAY="/gentoo/local/portage /gentoo/local/layman/x11 /gentoo/local/layman/sunrise /gentoo/local/layman/science /gentoo/local/layman/megacoffee /gentoo/local/layman/kde" SYNC="rsync://rsync.us.gentoo.org/gentoo-portage" USE="24bpp 256-color 3des 3dnow 3dnowext 3ds 64bit R S3TC X a2ps a52 aac aacplus aacs aalib accessibility ace acl acoustid acpi additions addressbook adolc aes aes-ccm aes-gcm aesicm aften agg aio airplay akonadi alac alaw alevt alisp all_sfx alsa amd64 amr anacron analitza analogtv ancient android animgif ansi ant ao apache apache2 apm apng arc4 arcfour archive armadillo arpack artworkextra asdf asn asn1 astr asyncns atm atsc attica audacious audio audiofile auth authdaemond auto-completion autoipd automap automount autotools autotrace avahi bash-completion bazaar bcmath bdf berkdb binfilter bitmap bittorrent biysk bl blas blender blksha1 bloodsuckermaps bluetooth bluray boo bookmarks boost branding btrfs bugzilla builder bwscheduler bzip2 c++0x cairo cal3d calendar canna caps cblas-external ccache cdaudio cdda cddb cdf cdinstall cdparanoia cdr cdrom cdsound cegui celt cgi chardet charmap cheats checkpath chm chroot cilk cipher-aes-128 cipher-aes-192 cipher-aes-256 cipher-blowfish city cjk clamav clang cli client clucene clutter cmake collab color colordiff compress consolekit context contrast contrib cpio cppunit cpumining cracklib cramfs crashreporter cron crypt cryptsetup cscope css ctype cups curl curlwrappers custom-optimization cvs cvsgraph cxx d dap data dbus ddate debug-frame debug-utils debugger declarative demo deprecated designer-plugin desktopglobe detex development devhelp device-mapper dga dhcp dia dirac discouraged distinct-l djvu dlna dmraid dns docbook doctool doom doom1 doom2 doomsday dosbox dot double-precision downloadorder dri drm drmaa dtmf dts dv dvb dvd dvdnav dvdr dvi dvipdfm ebook edd editor egl eigen elf emacs embedded emboss emf emovix enca encode enscript epspdf ethernet examples excel exceptions exif expoblending extensions extra extra-algorithms extra-cardsets extra-ciphers extra-tools extras faac faad facedetect faillog fakevim fam fancy fastcgi fat fax fbcondecor fcgi festival ffmpeg fftw filter finger firefox firewalld firmware fits flac flatfile flickr fluidsynth fma fmod fontconfig fontforge fonts foomaticdb fortran fortran95 fortune fpx freetts freetype frei0r ftp fts3 fuse g3dvl gadu games gbm gcdmaster gd gdal gdbm gdu geoip geolocation geos gif gimp git gkrellm glade glamor glep glew glgd glib glut gmail gmath gme gml gmp gmtfull gmttria gnome-print gnuplot gocr goffice gold gopher gost gpac gpg gphoto2 gpm grammar graphics graphicsmagick graphite graphviz grass groupwise gsf gsl gsm gstreamer gtk gtk3 gtkhtml gts guidexml guile h224 h281 h323 handbook handwriting hash hbci hddtemp hdf hdf5 hdri hesiod heterogeneous hexen hexenworld high-ints highlight history holidays hou howl-compat html http httpd humanities hunspell hwinfo hyphenation i18n ical iconv icoutils icq icu id3 id3tag ide idea idn ieee1394 ignore-case image imagemagick imaging imap imlib inifile inkjar inotify introspection iplayer ipv6 ipython irc isag ivr jabber jadetex jai java java6 javacomm javascript jbig jce jimi jit jmf john jpeg jpeg2k json kate kde kdecards kdenlive kdepim kdrive kerberos kernel keymap kipi konqueror kontact kpathsea kvm ladspa lame lapack lasi latex lcms ldap lensfun libass libburn libffi libkms liblockfile libnotify libproxy libsamplerate libssh2 libtiger libv4l libvirtd libwww lightning lights live llvm lm_sensors localstorage lock log log4j logrotate logviewer logwatch lqr lto lua luatex lvm lvm2 lxc lyrics lzma lzo mad madde mail maildir maps math mathml matplotlib matroska maui mbrola md5sum mdadm mdnsresponder-compat media mediawiki melt memmap mercurial metapost metis mhash midi mikmod mime minizip mixer mjpeg mmap mmx mmxext mng mod modplug modules mopac7 mount mozdom mozilla mp3 mp3tunes mp4 mpeg mpi_njtree mplayer mpqc mtp mudflap multilib multimedia multiprocess multitarget multiuser musepack music musicbrainz mysql mysqli na_dd na_dtv na_icons nas natspec ncat ncurses ndiff net netcdf nethack netpbm network network-cron networking new-clx new-login nfs nls nmap-update nntp nocd nodrm nosource nowin nowlistening nping npp nptl nsplugin nss nsscache nssdb ntfs ntfsprogs ntp numa numpy nut nuv oauth objc ocaml ocr ocrad octave odbcmanual odf ofa offensive offlinehelp ofx ogg ogm okteta okular omega openal openbabel opencl openexr opengl openinventor openmp openssl opensslcrypt openstreetmap openvg openxml optimization optimize-cflags opus orc osc oscar osd osdmenu osgapps osmesa ots pager pam pam_ssh pango panorama paranoidmsg parcheck parse-clocks parted patented pbins pbs pch pci pcntl pcre pcre16 pdf pdfannotextractor pdl2 pdo perl pgo pgplot phonon php phyp physfs pink pipe plasma player playlist plotutils plugins plutonia png pnm pogooglue policykit pop portage posix postfix postproc postscript ppds prison proj projectm psf pstricks pth publishers pulseaudio pvr pygments pylint python python3 q32 q64 q8 qalculate qd qemu qhull qimageblitz qml qnx qos qscintilla qt qt-dbus qt-faststart qt3support qt4 qthelp quesoglc quicktime quota quotes qwt r600-llvm-compiler radio rar raw rc5 rcs rdesktop readline real redeyes regex remix remote reports resources reviewboard rfc3779 rle rogue romio root rpc rpm rrdcgi rrdtool rss rtc rtf rtmp rtsp samba sasl sbcl scale0tilt scanfolder scanner schroedinger science scipy scotch screen script scripting scripts scripttools sdk sdl sdl-image sdlgfx search search-index secure-delete semantic-desktop sensord sensors server session setproctitle sftp sha512 shadow shared-glapi sharedmem shine shm shmvideo shorten shout sid sift sigsegv sip sipim skins skype slp smbclient smbsharemodes smbtav2 smime smp sms smtp sndfile snmp soap sockets socks socks5 solver songs sou sound soundex sounds soup sourceview sox spamassassin sparse spatialite speech speex spell sql sqlite sqlite3 srt srtp sse sse2 sse3 ssh ssl stars startup-notification statistics stats stlport stream subject-rewrite subtitles subunit subversion suexec suid superlu svg swat swig switcher symlink syslog system-sqlite systeminfo sysvipc szip t1lib taamey taglib tcl tcmalloc tcpd templates tesseract tex4ht texi2html textures tga themedesigner themes theora thesaurus thin-splines threads threadsafe thumbnail thunar tidy tiff timezone tk tls tnt tokenizer toolbar tools torque track-src-odirect traits transcode translator truetype tts tv tv_check tv_combiner tv_pick_cgi tvtime twolame type3 udev udisks udunits umfpack uml unicode unique unlock-notify unzip upcall upnp upower urandom urlpicpreview usb userlocales userpriv utempter utils uudeview uuid v4l vaapi valgrind vamp vcd vcdx vde vdpau vdr video videos videoslideshow vim vim-pager vim-syntax virt-network virtualbox virtuoso visibility vlm vnc voice vorbis vpx vserver vxml wav wavpack weather web webcam webdav webdav-neon webdav-serf webinterface webkit webm webp webpresence wide-unicode wifi wiki winbind windeco wineappdb wininst winpopup wma wma-fixed wmf word-perfect wordperfect wpg wps wxwidgets wyfv x264 xa xanim xattr xcap xcb xcomposite xdm-auth xerces-c xetex xext xface xforms xforward xft xhtml xine xinerama xinetd xlib-xcb xml xmlpatterns xmlreader xmlrpc xmlwriter xmp xnest xorg xosd xplanet xpm xrandr xrender xscreensaver xsettings xsl xslt xtended xterm xv xvfb xvid xvmc yaepg yahoo youtube zeitgeist zeroconf zip zlib zsh-completion zvbi" ABI_X86="64 32" ALSA_CARDS="intel8x0 intel8x0m pxa2xx-ac97 hda-intel" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias cgi cgid authn_core authz_core unixd socache_shmcb lbmethod_bytraffic slotmem_shm" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="canon" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CURL_SSL="openssl" DRACUT_MODULES="btrfs crypt syslog biosdevname caps crypt-gpg ssh-client syslog" DVB_CARDS="af9005 bcm3510 cx18 cx231xx cx23885 mpc718 nxt200x sp8870 sp887x" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer nlpsolver scripting-javascript wiki-publisher scripting-beanshell" LINGUAS="en en_US" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5 php5-4 php5-3" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" QEMU_SOFTMMU_TARGETS="i386 x86_64" QEMU_USER_TARGETS="i386 ppc ppc64 ppc64abi32 x86_64" RUBY_TARGETS="ruby18 ruby19 ruby20" SANE_BACKENDS="canon canon630u canon_dr canon_pp hp hp3500 hp3900 hp4200 hp5400 hp5590 hpljm1005 hpsj5s net pnm" USERLAND="GNU" VIDEO_CARDS="radeon r300 r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON ================================================================= Package Settings ================================================================= app-editors/emacs-24.3-r2 was built with the following: USE="alsa dbus games gif gpm gtk gtk3 hesiod imagemagick jpeg kerberos png sound svg tiff xft xpm -X -Xaw3d (-aqua) -athena -gconf -gnutls -gsettings -gzip-el -libxml2 -livecd -m17n-lib -motif -pax_kernel (-selinux) -source -toolkit-scroll-bars -wide-int"
I cannot reproduce this. Something strange is going on here: F: open_wr S: deny P: /dev/dri/card0 A: /dev/dri/card0 R: /dev/dri/card0 C: ./src/emacs --version With the --version option, Emacs outputs the version and exits immediately. This is before display initialisation. Can you post the stderr output of "strace emacs --version"?
Created attachment 357474 [details] strace emacs --version 2>emacs.strace
(In reply to Erik Zeek from comment #2) > Created attachment 357474 [details] > strace emacs --version 2>emacs.strace Looks like some library does nasty things when initialising ... > open("/usr/lib64/libOpenCL.so.1", O_RDONLY|O_CLOEXEC) = 3 Can you build the depending libs (at least mesa and imagemagick, maybe more) with USE=-opencl and then try if the problem still occurs?
Created attachment 357484 [details] strace emacs --version 2>emacs.strace The strace after building with -opencl. This seems to have fixed it.
Sorry for the duplicate comment.
X11 team, any idea what is happening here? "emacs --version" just does option parsing, outputs the version with printf, and then exits immediately.
It appears that some library attempts to execute OpenCL code during build. This is not a problem when the OpenCL code is run on the CPU but it causes a sandbox violation when it is attempted run on the GPU. Unfortunately I don't know of a generic way to force OpenCL to use the CPU. A workaround might be to set the OCL_ICD_VENDORS environment variable to a bogus directory so that libOpenCL won't find any icd, which will prevent OpenCL code from being run at all.
(In reply to Chí-Thanh Christopher Nguyễn from comment #8) > A workaround might be to set the OCL_ICD_VENDORS environment variable to a > bogus directory so that libOpenCL won't find any icd, which will prevent > OpenCL code from being run at all. Adding such workarounds to random ebuilds like emacs doesn't look right to me. Emacs doesn't deal with OpenCL directly, only via some libraries (whose functions aren't even called when doing emacs --version). Reassigning to x11.
See-Also: bug #472688, bug #485422, bug #490457
I suspect this is a duplicate of bug 472766? I'm not 100% sure. Does the emacs binary somehow link to ImageMagick, or is this entirely separate OpenCL issue? Please mark this as a duplicate of bug 472766, if it's indeed about the same thing, and it's indeed ImageMagick that should own any future sandbox.d file
(In reply to Samuli Suominen from comment #11) > I suspect this is a duplicate of bug 472766? I'm not 100% sure. > Does the emacs binary somehow link to ImageMagick, or is this entirely > separate OpenCL issue? Emacs with USE=imagemagick links to ImageMagick indeed. (In reply to Erik Zeek from comment #4) > Created attachment 357484 [details] > strace emacs --version 2>emacs.strace > > The strace after building with -opencl. This seems to have fixed it. Not sure if "building with -opencl" refers to imagemagick only. (But my question in comment #3 was equally unprecise.) @Erik: Can you build media-gfx/imagemagick with and without USE=opencl (but no changes to other packages), and try to reproduce the problem in either case?
=media-gfx/imagemagick-6.8.8.10[opencl] installs a /etc/sandbox.d file with content of SANDBOX_PREDICT="/dev/dri/card" now that should workaround the problem if that solves the emacs bug too, please dupe to bug 472766
(In reply to Samuli Suominen from comment #13) > =media-gfx/imagemagick-6.8.8.10[opencl] installs a /etc/sandbox.d file with > content of SANDBOX_PREDICT="/dev/dri/card" now that should workaround the > problem > if that solves the emacs bug too, please dupe to bug 472766 I can no longer replicate this bug. I tried removing the sandbox file and emerging emacs, and I got no sandbox violations. I don't know what might have changed to fix it. I'll mark it as WORKSFORME and not a dupe.
*** This bug has been marked as a duplicate of bug 472766 ***
