Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 854348 - media-libs/ftgl-2.1.3_rc5: Package does not compile - sandbox violation
Summary: media-libs/ftgl-2.1.3_rc5: Package does not compile - sandbox violation
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: Normal major
Assignee: Gentoo Games
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-06-26 06:17 UTC by Elizabeth Doughty
Modified: 2022-06-27 04:40 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Build log for media-libs/ftgl (ftgl-build.log,11.08 KB, text/plain; charset=utf-8)
2022-06-26 07:15 UTC, Elizabeth Doughty
Details
Output of emerge --info (emerge-info.log,6.38 KB, text/plain; charset=utf-8)
2022-06-26 07:27 UTC, Elizabeth Doughty
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Elizabeth Doughty 2022-06-26 06:17:11 UTC
When trying to install the package (media-libs/ftgl), it generates a sandbox violation error in the configuration stage when it tries to access /usr/share/fonts when checking for a TrueType font.

Reproducible: Always

Steps to Reproduce:
1. Execute command `emerge media-libs/ftgl`
Actual Results:  
The package does not install, instead generating a sandbox violation error, as described above.

Expected Results:  
The package should have installed.

media-libs/ftgl is a dependency of www-client/firefox in my configuration.
`emerge --info` generates urls, which, as a new user, I cannot add. I will add it as an attachment instead, if possible.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-06-26 06:19:59 UTC
Can you attach the full build.log? (Also sandbox.log if it exists)

Normally, this is caused by another package not properly updating cache after installing a font.

May be able to attach emerge --info instead wrt links, or could mangle them yourself if that's alright.
Comment 2 Elizabeth Doughty 2022-06-26 07:15:56 UTC
Created attachment 787691 [details]
Build log for media-libs/ftgl
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-06-26 07:20:50 UTC
F: mkostemp
S: deny
P: /usr/share/fonts/encodings/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/.uuid.TMP-XXXXXX
C: fc-match -sv serif 

F: mkostemp
S: deny
P: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
A: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
R: /usr/share/fonts/encodings/large/.uuid.TMP-XXXXXX
C: fc-match -sv serif
Comment 4 Elizabeth Doughty 2022-06-26 07:27:57 UTC
Created attachment 787694 [details]
Output of emerge --info
Comment 5 James Le Cuirot gentoo-dev 2022-06-26 07:45:43 UTC
I've seen this before with x11-themes/arc-theme, before it was pre-rendered upstream. We had to add this:

addpredict "${BROOT}"/usr/share/inkscape/fonts/.uuid.TMP-XXXXXX

I tried to figure out why it happens but wasn't able to.
Comment 6 Ionen Wolkens gentoo-dev 2022-06-26 08:52:05 UTC
Run "fc-cache -fs" as root and try again as a workaround

And hm.. this one is different than usual, with two way to see it...

1. From a quick look xorg-3.eclass creates these directories without running fc-cache -fs leading to sandbox violation when something tries to generate the missing cache. These are initially empty until a font which do run font_pkg_postinst is installed.

...but

2. ~arch fontconfig-2.14.0-r1 skips these, this only happens if using stable fontconfig-2.13.1-r2, so to reproduce downgrade to stable one, rm /usr/share/fonts/encodings/.uuid, then emerge ftgl

Either way it's not a ftgl bug if that wasn't clear, this happens with any packages using fontconfig in some way and the issue always lies elsewhere (so either a xorg-3.eclass fix, or stabilize 2.14.0-r1 I guess).
Comment 7 Vasily(NekoCWD) 2022-06-26 18:25:42 UTC
(In reply to Ionen Wolkens from comment #6)
> Run "fc-cache -fs" as root and try again as a workaround
> 
> And hm.. this one is different than usual, with two way to see it...
> 
> 1. From a quick look xorg-3.eclass creates these directories without running
> fc-cache -fs leading to sandbox violation when something tries to generate
> the missing cache. These are initially empty until a font which do run
> font_pkg_postinst is installed.
> 
> ...but
> 
> 2. ~arch fontconfig-2.14.0-r1 skips these, this only happens if using stable
> fontconfig-2.13.1-r2, so to reproduce downgrade to stable one, rm
> /usr/share/fonts/encodings/.uuid, then emerge ftgl
> 
> Either way it's not a ftgl bug if that wasn't clear, this happens with any
> packages using fontconfig in some way and the issue always lies elsewhere
> (so either a xorg-3.eclass fix, or stabilize 2.14.0-r1 I guess).

It works for me, thanks
Comment 8 Elizabeth Doughty 2022-06-27 04:40:16 UTC
(In reply to Ionen Wolkens from comment #6)
> Run "fc-cache -fs" as root and try again as a workaround
> 
> And hm.. this one is different than usual, with two way to see it...
> 
> 1. From a quick look xorg-3.eclass creates these directories without running
> fc-cache -fs leading to sandbox violation when something tries to generate
> the missing cache. These are initially empty until a font which do run
> font_pkg_postinst is installed.
> 
> ...but
> 
> 2. ~arch fontconfig-2.14.0-r1 skips these, this only happens if using stable
> fontconfig-2.13.1-r2, so to reproduce downgrade to stable one, rm
> /usr/share/fonts/encodings/.uuid, then emerge ftgl
> 
> Either way it's not a ftgl bug if that wasn't clear, this happens with any
> packages using fontconfig in some way and the issue always lies elsewhere
> (so either a xorg-3.eclass fix, or stabilize 2.14.0-r1 I guess).

This worked. Thanks for your help.