diff options
| author |   Georgy Yakovlev <gyakovlev@gentoo.org> | 2021-11-14 16:35:30 -0800 |
|---|---|---|
| committer | Georgy Yakovlev <gyakovlev@gentoo.org> | 2021-11-14 16:40:24 -0800 |
| commit | 56132fca92886544d383f81dffce62f54f56b481 (patch) | |
| tree | 22de96214a3c02a5661ff87af7afda06831197b2 | |
| parent | sys-apps/systemd: add 249.6, drop 249.5-r1 (diff) | |
| download | gentoo-56132fca92886544d383f81dffce62f54f56b481.tar.gz gentoo-56132fca92886544d383f81dffce62f54f56b481.tar.bz2 gentoo-56132fca92886544d383f81dffce62f54f56b481.zip | |
sys-libs/librtas: revbump, add sandbox predict for /var/lock/LCK..librtas
otherwise lscpu from util-linux linked to librtas triggers sandbox
viulation
F: open_wr
S: deny
P: /var/lock/LCK..librtas
A: /var/lock/LCK..librtas
R: /run/lock/LCK..librtas
C: lscpu
Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>
| -rw-r--r-- | sys-libs/librtas/librtas-2.0.2-r2.ebuild (renamed from sys-libs/librtas/librtas-2.0.2-r1.ebuild) | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys-libs/librtas/librtas-2.0.2-r1.ebuild b/sys-libs/librtas/librtas-2.0.2-r2.ebuild index 61863ff24d39..f43d44b267f5 100644 --- a/sys-libs/librtas/librtas-2.0.2-r1.ebuild +++ b/sys-libs/librtas/librtas-2.0.2-r2.ebuild @@ -27,4 +27,8 @@ src_configure() { src_install() { emake DESTDIR="${D}" install docdir="${EPREFIX}"/usr/share/doc/${PF} find "${D}" -name '*.la' -delete || die + # librtas_src/syscall_rmo.c: static const char *lockfile_path = "/var/lock/LCK..librtas"; + # this way we prevent sandbox violations in lscpu linked to rtas + dodir /etc/sandbox.d + echo 'SANDBOX_PREDICT="/run/lock/LCK..librtas"' > "${ED}"/etc/sandbox.d/50librtas || die } |