Bug 607458 – app-admin/keepass-2.34 : sandbox issue (XDG_xxx_DIR related)

• Status: RESOLVED TEST-REQUEST
• Product: Gentoo Linux

[Description Toralf Förster 2017-01-28 09:24:20 UTC]

This issue is forced at the tinderbox by making:

export XDG_DESKTOP_DIR="/root/Desktop"
export XDG_DOCUMENTS_DIR="/root/Documents"
export XDG_DOWNLOAD_DIR="/root/Downloads"
export XDG_MUSIC_DIR="/root/Music"
export XDG_PICTURES_DIR="/root/Pictures"
export XDG_PUBLICSHARE_DIR="/root/Public"
export XDG_TEMPLATES_DIR="/root/Templates"
export XDG_VIDEOS_DIR="/root/Videos"
export XDG_RUNTIME_DIR="/root/run"
export XDG_CONFIG_HOME="/root/config"
export XDG_CACHE_HOME="/root/cache"
export XDG_DATA_HOME="/root/share"

pls see bug #567192 too

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkdir
S: deny

  -----------------------------------------------------------------

  This is an stable amd64 chroot image (named plasma-stable_20170122-095645) at a hardened host acting as a tinderbox.

  -----------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-5.4.0 *
llvm-config --version:
3.7.1
Available Java Virtual Machines:
  [1]   icedtea-bin-7 
  [2]   icedtea-bin-8  system-vm
Available Python interpreters, in order of preference:
  [1]   python3.4
  [2]   python2.7 (fallback)
  [3]   jython2.7 (fallback)
Available Ruby profiles:
  [1]   ruby21 (with Rubygems) *
java-config:
The following VMs are available for generation-2:
1)	IcedTea JDK 7.2.6.8 [icedtea-bin-7]
*)	IcedTea JDK 3.2.0 [icedtea-bin-8]
  -----------------------------------------------------------------

[Comment 1 Toralf Förster 2017-01-28 09:24:23 UTC]

Created attachment 461686 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2017-01-28 09:24:27 UTC]

Created attachment 461688 [details]
app-admin:keepass-2.34:20170128-091349.log

[Comment 3 Toralf Förster 2017-01-28 09:24:30 UTC]

Created attachment 461690 [details]
emerge-history.txt

[Comment 4 Toralf Förster 2017-01-28 09:24:33 UTC]

Created attachment 461692 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2017-01-28 09:24:37 UTC]

Created attachment 461694 [details]
sandbox-1895.log

[Comment 6 Alessandro Di Federico 2017-01-29 22:29:10 UTC]

I quickly read #567192, it's my understanding that the XDG eclass should be used. Do you have a patch for the ebuild? Do you need any help specific to this package?

[Comment 7 Michael Palimaka (kensington) 2017-06-11 04:47:00 UTC]

I can't reproduce this with latest packages.