From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8324D1582EF for ; Wed, 19 Feb 2025 04:41:00 +0000 (UTC) Received: from lists.gentoo.org (bobolink.gentoo.org [140.211.166.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) (Authenticated sender: relay-lists.gentoo.org@gentoo.org) by smtp.gentoo.org (Postfix) with ESMTPSA id 6F0A63431E1 for ; Wed, 19 Feb 2025 04:41:00 +0000 (UTC) Received: from bobolink.gentoo.org (localhost [127.0.0.1]) by bobolink.gentoo.org (Postfix) with ESMTP id 93733110479; Wed, 19 Feb 2025 04:40:16 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bobolink.gentoo.org (Postfix) with ESMTPS id D7F9B110470 for ; Wed, 19 Feb 2025 04:40:15 +0000 (UTC) Received: by smtp.gentoo.org (Postfix, from userid 2212) id B81AF3430FD; Wed, 19 Feb 2025 04:40:15 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id B46153430D8 for ; Wed, 19 Feb 2025 04:40:15 +0000 (UTC) Date: Wed, 19 Feb 2025 04:40:15 +0000 (UTC) From: Andrey Grozin To: gentoo-dev@lists.gentoo.org Subject: [gentoo-dev] sandbox and /proc//clear_refs [was: problems with media-gfx/asymptote] In-Reply-To: Message-ID: References: <037e2c8f-2e80-1879-21fd-0d3871897ed4@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=US-ASCII X-Archives-Salt: 9eb6f888-24e1-4d3a-b4fd-0ecdd741e102 X-Archives-Hash: a13546276b4cf4fa3f7783e2fb6ad0f5 Some additional information: # strace -e trace=file ./cordtest ... openat(AT_FDCWD, "/proc/3702/clear_refs", O_WRONLY) = 3 ... SUCCEEDED +++ exited with 0 +++ It is absolutely legal for the owner of a process to write to /proc//clear_refs I think it is a bug in Gentoo sandbox that this is not allowed. Andrey