Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 647496 - sys-apps/man-db[seccomp]: mandb: xz: Bad system call
Summary: sys-apps/man-db[seccomp]: mandb: xz: Bad system call
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL: https://git.savannah.gnu.org/cgit/man...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-02-13 13:25 UTC by Conrad Kostecki
Modified: 2018-03-13 19:54 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Conrad Kostecki gentoo-dev 2018-02-13 13:25:04 UTC
When I do compile sys-apps/man-db with USE="seccomp" it seems, that man-db isn't anymore able to run?

mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
Updating index cache for path `/usr/share/man/man1'. Wait...mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call
mandb: xz: Bad system call

(Repeats very often)

-> https://lists.nongnu.org/archive/html/man-db-announce/2018-02/msg00000.html

Settings MAN_DISABLE_SECCOMP=1 or disable USE="seccomp" seems to do the job.
Comment 1 Conrad Kostecki gentoo-dev 2018-02-13 13:27:33 UTC
Portage 2.3.24 (python 3.6.4-final-0, default/linux/amd64/17.1, gcc-7.3.0, glibc-2.26-r5, 4.15.2-gentoo x86_64)
=================================================================
System uname: Linux-4.15.2-gentoo-x86_64-Intel_Xeon_Processor_-Skylake,_IBRS-with-gentoo-2.4.1
KiB Swap:    8388604 total,   8388604 free
Timestamp of repository gentoo: Tue, 13 Feb 2018 12:45:01 +0000
Head commit of repository gentoo: 476d068b2500d138dc2596f6101339928572270f
sh bash 4.4_p19
ld GNU ld (Gentoo 2.30 p1) 2.30.0
ccache version 3.3.4 [enabled]
app-shells/bash:          4.4_p19::gentoo
dev-lang/perl:            5.26.1-r1::gentoo
dev-lang/python:          2.7.14-r1::gentoo, 3.6.4::gentoo
dev-util/ccache:          3.3.4-r1::gentoo
dev-util/cmake:           3.10.2::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r2::gentoo
sys-apps/openrc:          0.34.11::gentoo
sys-apps/sandbox:         2.12::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.11.6-r2::gentoo, 1.15.1-r1::gentoo
sys-devel/binutils:       2.30::gentoo
sys-devel/gcc:            7.3.0::gentoo
sys-devel/gcc-config:     1.9.1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.15::gentoo (virtual/os-headers)
sys-libs/glibc:           2.26-r5::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.de.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-metamanifest: yes
    sync-rsync-extra-opts: --exclude-from=/etc/portage/rsync_excludes

bl4ckb0x
    location: /usr/local/portage
    masters: gentoo

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -mfpmath=sse,387 -mtune=intel -O3 -fomit-frame-pointer -malign-data=abi -mtls-dialect=gnu2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo"
CXXFLAGS="-march=native -mfpmath=sse,387 -mtune=intel -O3 -fomit-frame-pointer -malign-data=abi -mtls-dialect=gnu2 -pipe -fvisibility-inlines-hidden"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask=n --quiet-build=n --with-bdeps=y"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://mirror.netcologne.de/gentoo/"
INSTALL_MASK="/etc/systemd/* /etc/xinetd.d/* /usr/lib/systemd/system/*"
LANG="de_DE.UTF-8"
LC_ALL="de_DE.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--sort-common -Wl,-z,now"
LINGUAS="de de_DE"
MAKEOPTS="-j9 -l8"
PKGDIR="/usr/portage/packages"
PORTAGE_BUNZIP2_COMMAND="pbunzip2"
PORTAGE_BZIP2_COMMAND="pbzip2"
PORTAGE_COMPRESS="xz"
PORTAGE_COMPRESS_FLAGS="-9e"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X acl alsa amd64 berkdb bzip2 cairo caps cjk cracklib crypt cxx dbus fontconfig gdbm gif gmp gnutls gpm iconv icu idn introspection ipv6 jbig jit jpeg libsamplerate lzma lzo maildir mng ncurses nls nptl ogg opencl opengl openmp pam pcre pie png readline rtmp samba sdl slang sndfile spell sqlite ssl suid svg symlink threads tiff truetype udev unicode usb vaapi vdpau vim-syntax xattr xcb xml zeroconf zlib zsh-completion" ABI_X86="32 64" COLLECTD_PLUGINS="cgroups conntrack contextswitch cpu cpufreq cpusleep df disk dns entropy ethstat exec filecount hddtemp hugepages interface ipc iptables irq java load memory mysql netlink nfs nginx numa openvpn ping postgresql processes protocols rrdcached sensors serial smart swap syslog tcpconns thermal turbostat unixsock uptime users" CPU_FLAGS_X86="aes mmx mmxext sse sse2 sse3 ssse3 sse4_1 sse4_2" CURL_SSL="openssl" ELIBC="glibc" GRUB_PLATFORMS="pc" INPUT_DEVICES="libinput" KERNEL="linux" L10N="de de_DE" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset fancyindex fastcgi geo geoip gunzip gzip headers_more limit_conn proxy realip referer rewrite sticky stub_status upstream_keepalive" NGINX_MODULES_STREAM="access geo geoip limit_conn realip return ssl_preread" PHP_TARGETS="php7-2" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" RUBY_TARGETS="ruby24 ruby25" USERLAND="GNU" VIDEO_CARDS="virgl"
Unset:  CC, CPPFLAGS, CTARGET, CXX
Comment 2 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2018-02-13 13:32:04 UTC
What version of man-db do you have installed?
Comment 3 Conrad Kostecki gentoo-dev 2018-02-13 13:35:17 UTC
(In reply to Lars Wendler (Polynomial-C) from comment #2)
> What version of man-db do you have installed?

[ebuild   R    ] sys-apps/man-db-2.8.1::gentoo  USE="gdbm manpager nls seccomp zlib -berkdb (-selinux) -static-libs" 0 KiB
Comment 4 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2018-02-13 13:42:59 UTC
(In reply to Conrad Kostecki from comment #0)
> 
> ->
> https://lists.nongnu.org/archive/html/man-db-announce/2018-02/msg00000.html
> 
> Settings MAN_DISABLE_SECCOMP=1 or disable USE="seccomp" seems to do the job.

As written in the announcement message you provided the link to, please get in touch with upstream about this issue. man-db-2.8.1 already got a couple of fixes wrt. seccomp but it seems there are more issues.
Comment 5 Conrad Kostecki gentoo-dev 2018-02-13 16:20:39 UTC
(In reply to Lars Wendler (Polynomial-C) from comment #4)
> (In reply to Conrad Kostecki from comment #0)
> > 
> > ->
> > https://lists.nongnu.org/archive/html/man-db-announce/2018-02/msg00000.html
> > 
> > Settings MAN_DISABLE_SECCOMP=1 or disable USE="seccomp" seems to do the job.
> 
> As written in the announcement message you provided the link to, please get
> in touch with upstream about this issue. man-db-2.8.1 already got a couple
> of fixes wrt. seccomp but it seems there are more issues.

Yes, I've done that by now: https://savannah.nongnu.org/bugs/index.php?53143
Comment 6 Conrad Kostecki gentoo-dev 2018-02-14 09:04:48 UTC
Fixed for 2.8.2, applying patch for 2.8.1 works for me and solved the problem.
Comment 7 Thomas Capricelli 2018-02-18 02:21:04 UTC
I got the same problem here. Bzip2 works very well, sys-apps/man works well, but man-db[+seccomp] fails with this kind of error.

I didn't know about all of this, but on ~amd64, man-db is the default for virtual/man and seccomp is set on my profile. I got the following message when trying man:

man: bzip2: Bad system call
man: bzip2: Bad system call
man: bzip2: Bad system call
man: bzip2: Bad system call
man: bzip2: Bad system call

(i have no idea how man decide to use xz or bzip2 for compressing)

This problem appeared only recently (few weeks?) on several gentoo systems
Comment 8 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2018-03-01 12:20:31 UTC
Should be fixed in man-db-2.8.2
Comment 9 Thomas Capricelli 2018-03-04 18:50:08 UTC
i can confirm that, thx