Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 666446 - app-office/libreoffice-6.1.1.2 Sandbox violation
Summary: app-office/libreoffice-6.1.1.2 Sandbox violation
Status: RESOLVED DUPLICATE of bug 666418
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-09-18 02:32 UTC by MrSnivvel
Modified: 2018-09-18 19:54 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
Sandbox log (sandbox-11077.log,3.08 KB, text/x-log)
2018-09-18 02:32 UTC, MrSnivvel
Details

Note You need to log in before you can comment on or make changes to this bug.
Description MrSnivvel 2018-09-18 02:32:01 UTC
Created attachment 547136 [details]
Sandbox log

GENTOO_VM=icedtea-8  CLASSPATH="" JAVA_HOME="/usr/lib64/icedtea8"
JAVACFLAGS="-source 1.6 -target 1.6" COMPILER=""
Comment 1 MrSnivvel 2018-09-18 02:32:33 UTC
Portage 2.3.49 (python 3.6.6-final-0, default/linux/amd64/17.0/desktop/gnome/systemd, gcc-8.2.0, glibc-2.27-r6, 4.18.6-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.18.6-gentoo-x86_64-Intel-R-_Core-TM-_i7-4800MQ_CPU_@_2.70GHz-with-gentoo-2.6
KiB Mem:    32577560 total,   3402592 free
KiB Swap:    3999740 total,   3999228 free
Timestamp of repository gentoo: Mon, 17 Sep 2018 18:00:01 +0000
Head commit of repository gentoo: 9fd2e2c04ed2455ecf41a4bf897351bebfb0a929
Head commit of repository brother-overlay: c057d3b0fb8e6afe53b4c9f354d68a43c9f33032

sh bash 4.4_p23
ld GNU ld (Gentoo 2.30 p3) 2.30.0
app-shells/bash:          4.4_p23::gentoo
dev-java/java-config:     2.2.0-r4::gentoo
dev-lang/perl:            5.26.2::gentoo
dev-lang/python:          2.7.15::gentoo, 3.4.8-r1::gentoo, 3.5.5-r1::gentoo, 3.6.6::gentoo, 3.7.0::gentoo
dev-util/cmake:           3.12.2::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.6-r1::gentoo
sys-apps/openrc:          0.38.2::gentoo
sys-apps/sandbox:         2.13::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.10.3-r3::gentoo, 1.11.6-r3::gentoo, 1.12.6-r2::gentoo, 1.13.4-r2::gentoo, 1.14.1-r2::gentoo, 1.15.1-r2::gentoo, 1.16.1-r1::gentoo
sys-devel/binutils:       2.30-r3::gentoo, 2.31.1::gentoo
sys-devel/gcc:            6.4.0-r3::gentoo, 7.3.0-r4::gentoo, 8.2.0-r2::gentoo
sys-devel/gcc-config:     2.0::gentoo
sys-devel/libtool:        2.4.6-r5::gentoo
sys-devel/make:           4.2.1-r4::gentoo
sys-kernel/linux-headers: 4.17::gentoo (virtual/os-headers)
sys-libs/glibc:           2.27-r6::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts: 
    sync-rsync-verify-max-age: 24
    sync-rsync-verify-metamanifest: yes

Local-Grotto
    location: /usr/local/portage
    masters: gentoo
    priority: 0

cg
    location: /var/lib/layman/cg
    masters: gentoo
    priority: 50

freeswitch
    location: /var/lib/layman/freeswitch
    masters: gentoo
    priority: 50

games-overlay
    location: /var/lib/layman/games-overlay
    masters: gentoo
    priority: 50

sirjaren
    location: /var/lib/layman/sirjaren
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    masters: gentoo
    priority: 50

torbrowser
    location: /var/lib/layman/torbrowser
    masters: gentoo
    priority: 50

wine
    location: /var/lib/layman/wine
    masters: gentoo
    priority: 50

zugaina
    location: /var/lib/layman/zugaina
    masters: gentoo
    priority: 50

brother-overlay
    location: /usr/local/portage/brother-overlay
    sync-type: git
    sync-uri: https://github.com/stefan-langenmaier/brother-overlay.git
    masters: gentoo
    priority: 9999

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/stunnel/stunnel.conf /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.2/ext-active/ /etc/php/cgi-php7.2/ext-active/ /etc/php/cli-php7.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en en_US"
MAKEOPTS="-j12"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 ao apache2 appindicator archive atasmart awt berkdb bluetooth boto branding bzip2 cairo calendar caps cdda cddb cdr cli cluster colord context crypt cups curl cxx d3d9 dbus development device-mapper dhclient dia down-root dri dts dvd dvdr eds elfutils emboss encode epspdf evo exif extensions extra extraengine fam ffmpge flac fortran fpm freerdp games gcj gd gdata gdbm gif git glamor gles gles1 gltf gnome gnome-keyring gnome-online-accounts google gpm graph graphics gstreamer gtk gtk3 hddtemp highlight http humanities iconv introspection iproute2 ipv6 javascript jemalloc jpeg jpeg2k json lcms ldap libkms libnotify libsecret libtirpc lm_sensors login lua lxc lzma mad matroska mms mmx mmxext mng mod modplug modules mp3 mp4 mpeg mtp multilib music mysql mysqli mysqlnd nautilus ncat ncurses ndiff network networkmanager nfs nfsv4 nfsv41 nls nping nptl odf offensive ogg omega opengl openmp opus osmesa pam pango pcre pda pdf pdfannotextractor pdo pgo php png policykit postgres postproc ppds printsupport profiling pstricks publishers pulseaudio qt5 raw readline redis rrdcgi s3tc samba science sdl seccomp sendto sensord slib soap sockets speex spell spice sqlite sse sse2 sse3 sse4.1 sse4.2 ssh ssl ssse3 staging startup-notification svc svg syntax-check systemd systemtap sysv-utils sysvipc tcpd telepathy terminal tex4ht texi2html theora threads thunar tiff tokudb tools tor-hardening truetype udev udisks unicode update_drivedb upower usb user-session v4l vaapi vdpau vim vim-syntax virtualbox visio vlc vnc vorbis vpx vte vulkan wayland webp widevine winbind wireshark-plugins wxwidgets x264 x265 xa xattr xcb xcomposite xetex xface xinerama xml xmlwriter xrandr xsl xslt xv xvfb xvid xvmc zenmap zip zlib zsh-completions" ABI_X86="64 32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_core authn_dbm authn_file authz_core authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation proxy proxy_balancer proxy_connect proxy_fdpass proxy_fcgi proxy_http proxy_scgi proxy_wstunnel ratelimit rewrite setenvif slotmem_shm socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" APACHE2_MPMS="event" CALLIGRA_FEATURES="karbon plan sheets stage words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx sse sse2 sse3 sse4_1 ssse3 mmxext" CURL_SSL="openssl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="mouse keyboard evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="nlpsolver scripting-beanshell scripting-javascript wiki-publisher" NETBEANS_MODULES="apisupport java javafx mobility php profiler websvccommon" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset empty_gif fastcgi geo gzip limit_conn limit_req map memcached proxy referer rewrite scgi split_clients ssi upstream_ip_hash userid uwsgi gunzip gzip_static metrics mp4 naxsi security realip stub_status pcre-jit" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres9_5 postgres10" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_5 python3_6 python3_7" QEMU_SOFTMMU_TARGETS="i386 x86_64" QEMU_USER_TARGETS="i386 x86_64" RUBY_TARGETS="ruby25" USERLAND="GNU" VIDEO_CARDS="intel nouveau i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 2 Nathan Zachary (RETIRED) gentoo-dev 2018-09-18 03:08:57 UTC
Hitting this with some other fonts as well:

*************************************
* WARNING : OpenSSL has been disabled. No code compiled by LibO will make use of it but system librares may create indirect dependencies
* WARNING : unknown (LiberationSans-Regular.ttf)
* WARNING : Unknown font mappings - unit tests disabled.
>>> Source configured.
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-24140.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkostemp
S: deny
P: /usr/share/fonts/util/.uuid.TMP-XXXXXX
A: /usr/share/fonts/util/.uuid.TMP-XXXXXX
R: /usr/share/fonts/util/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/util/.uuid
A: /usr/share/fonts/util/.uuid
R: /usr/share/fonts/util/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/encodings/large/.uuid
A: /usr/share/fonts/encodings/large/.uuid
R: /usr/share/fonts/encodings/large/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/util/.uuid.TMP-XXXXXX
A: /usr/share/fonts/util/.uuid.TMP-XXXXXX
R: /usr/share/fonts/util/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/util/.uuid
A: /usr/share/fonts/util/.uuid
R: /usr/share/fonts/util/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: mkostemp
S: deny
P: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/encodings/large/.uuid
A: /usr/share/fonts/encodings/large/.uuid
R: /usr/share/fonts/encodings/large/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans
Comment 3 Nathan Zachary (RETIRED) gentoo-dev 2018-09-18 03:38:23 UTC
Oddly, I get past these sandbox errors on my laptop with the same USE flag combination.  Trying to narrow down the differences here, but the environments seem to be the same between the two machines.

The only difference on the emerge that I see is that on my desktop (where it fails), there is (-libressl%) and that's not present on my laptop.
Comment 4 MrSnivvel 2018-09-18 03:50:43 UTC
I had the following message show up above the sandbox violation:

*************************************
* WARNING : OpenSSL has been disabled. No code compiled by LibO will make use of it but system librares may create indirect dependencies
* WARNING : unknown (DejaVuSans.ttf)
* WARNING : Unknown font mappings - unit tests disabled.
Comment 5 Arfrever Frehtes Taifersar Arahesis 2018-09-18 04:22:27 UTC

*** This bug has been marked as a duplicate of bug 666418 ***
Comment 6 MrSnivvel 2018-09-18 19:54:44 UTC
This is still present for me:


*************************************
* WARNING : OpenSSL has been disabled. No code compiled by LibO will make use of it but system librares may create indirect dependencies
* WARNING : unknown (DejaVuSans.ttf)
* WARNING : Unknown font mappings - unit tests disabled.
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/tmp/sandbox-5920.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkostemp
S: deny
P: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
A: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
R: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/Speedo/.uuid
A: /usr/share/fonts/Speedo/.uuid
R: /usr/share/fonts/Speedo/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
A: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
R: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/cyrillic/.uuid
A: /usr/share/fonts/cyrillic/.uuid
R: /usr/share/fonts/cyrillic/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/util/.uuid.TMP-XXXXXX
A: /usr/share/fonts/util/.uuid.TMP-XXXXXX
R: /usr/share/fonts/util/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/util/.uuid
A: /usr/share/fonts/util/.uuid
R: /usr/share/fonts/util/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} Calibri 

F: unlink
S: deny
P: /usr/share/fonts/encodings/large/.uuid
A: /usr/share/fonts/encodings/large/.uuid
R: /usr/share/fonts/encodings/large/.uuid
C: /usr/bin/fc-match -f %{file} Calibri 

F: mkostemp
S: deny
P: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
A: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
R: /usr/share/fonts/Speedo/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/Speedo/.uuid
A: /usr/share/fonts/Speedo/.uuid
R: /usr/share/fonts/Speedo/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: mkostemp
S: deny
P: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
A: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
R: /usr/share/fonts/cyrillic/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/cyrillic/.uuid
A: /usr/share/fonts/cyrillic/.uuid
R: /usr/share/fonts/cyrillic/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: mkostemp
S: deny
P: /usr/share/fonts/util/.uuid.TMP-XXXXXX
A: /usr/share/fonts/util/.uuid.TMP-XXXXXX
R: /usr/share/fonts/util/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/util/.uuid
A: /usr/share/fonts/util/.uuid
R: /usr/share/fonts/util/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: mkostemp
S: deny
P: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
C: /usr/bin/fc-match -f %{file} DejaVuSans 

F: unlink
S: deny
P: /usr/share/fonts/encodings/large/.uuid
A: /usr/share/fonts/encodings/large/.uuid
R: /usr/share/fonts/encodings/large/.uuid
C: /usr/bin/fc-match -f %{file} DejaVuSans 
 * --------------------------------------------------------------------------------
!!! When you file a bug report, please include the following information:
GENTOO_VM=icedtea-8  CLASSPATH="" JAVA_HOME="/usr/lib64/icedtea8"
JAVACFLAGS="-source 1.6 -target 1.6" COMPILER=""
and of course, the output of emerge --info =libreoffice-6.1.1.2