[gentoo-user] Failed to set XATTR_PAX markings

[gentoo-user] Failed to set XATTR_PAX markings

[thelma]

I'm getting a error: Failed to set XATTR_PAX markings
When I compile some pacakges eg:
icedtea-bin-7.2.6.4
thunderbird-38.5.0
firefox-bin-38.6.1

I'm not running Gentoo hardened,
grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
CONFIG_TMPFS_XATTR=y

emerge --info
Portage 2.2.26 (python 3.4.3-final-0, default/linux/x86/13.0/desktop,
gcc-4.8.5, glibc-2.21-r2, 3.10.17-gentoo i686)
=================================================================
System uname:
Linux-3.10.17-gentoo-i686-AMD_Athlon-TM-_XP_2500+-with-gentoo-2.2
KiB Mem:     1034164 total,    221020 free
KiB Swap:    2008120 total,   2007556 free
Timestamp of repository gentoo: Sat, 05 Mar 2016 19:00:01 +0000
sh bash 4.3_p42-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
ccache version 3.1.9 [disabled]
app-shells/bash:          4.3_p42-r1::gentoo
dev-java/java-config:     2.2.0::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.10-r1::gentoo, 3.4.3-r1::gentoo
dev-util/ccache:          3.1.9-r4::gentoo
dev-util/cmake:           3.3.1-r1::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.19.1::gentoo
sys-apps/sandbox:         2.10-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.10.3-r1::gentoo, 1.11.6-r1::gentoo,
1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo
sys-devel/gcc:            4.1.2::gentoo, 4.5.4::gentoo, 4.7.4::gentoo,
4.8.5::gentoo, 4.9.3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)
sys-libs/glibc:           2.21-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000

x-portage
    location: /usr/local/portage
    masters: gentoo
    priority: 0

ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA PUEL dlj-1.1 Oracle-BCLA-JavaSE"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib/fax /usr/share/gnupg/qualified.txt
/var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d
/etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release
/etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.6/ext-active/
/etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d
/etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d
/etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask-write=y --keep-going --with-bdeps=y"
FCFLAGS="-O2 -march=i686 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified
distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch
preserve-libs protect-owned sandbox sfperms strict unknown-features-warn
unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -march=i686 -pipe"
GENTOO_MIRRORS="http://distro.ibidio.org/pub/linux/distributions/gentoo/
ftp:///ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
http://gentoo.osuosl.org/ http://mirror.datapipe.net/gentoo
http://gentoo.binarycompass.org"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times
--omit-dir-times --compress --force --whole-file --delete --stats
--human-readable --timeout=180 --exclude=/distfiles --exclude=/local
--exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acpi alsa apache2 berkdb bluetooth branding bzip2 cairo
cdda cdr cgi cleartype cli consolekit corefonts cracklib crypt cups cxx
dbus dri dts dvd dvdr emboss encode exif fam firefox flac foomaticdb
fortran gdbm gif glamor gpm gtk hal iconv ipv6 java jpeg kpathsea lcms
ldap libnotify mad mng modules mp3 mp4 mpeg mysql ncurses nls nptl ogg
opengl openmp pam pango pcre pdf png policykit ppds qt3support readline
scanner sdl seccomp semantic-desktop server session spell ssl
startup-notification svg tcpd tetex thunar tiff truetype type1 udev
udisks unicode upower usb vorbis wxwidgets x264 x86 xattr xcb xml xv
xvid zlib" ABI_X86="32" ALSA_CARDS="via82xx" APACHE2_MODULES="actions
alias auth_basic auth_digest authn_anon authn_dbd authn_dbm
authn_default authn_file authz_dbm authz_default authz_groupfile
authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock
dbd deflate dir disk_cache env expires ext_filter file_cache filter
headers ident imagemap include info log_config logio mem_cache mime
mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect
proxy_http rewrite setenvif so speling status unique_id userdir
usertrack vhost_alias cgi" CALLIGRA_FEATURES="kexi words flow plan
sheets stage tables krita karbon braindump author" CAMERAS="ptp2"
COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog"
CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext sse" ELIBC="glibc"
GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt
gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore
rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx"
INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz
cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text"
LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer"
LINGUAS="en en_US" OFFICE_IMPLEMENTATION="libreoffice"
PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7"
PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21"
USERLAND="GNU" VIDEO_CARDS="nv vesa fbdev" XTABLES_ADDONS="quota2 psd
pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition
tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK,
PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS,
PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

-- 
Thelma

Re: [gentoo-user] Failed to set XATTR_PAX markings

[thelma]

I've tried to use: USE=xattr in make.conf
but it doesn't help.

Thelma

On 03/06/2016 10:08 AM, thelma@sys-concept.com wrote:
> I'm getting a error: Failed to set XATTR_PAX markings
> When I compile some pacakges eg:
> icedtea-bin-7.2.6.4
> thunderbird-38.5.0
> firefox-bin-38.6.1
> 
> I'm not running Gentoo hardened,
> grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
> CONFIG_TMPFS_XATTR=y
> 
> emerge --info
> Portage 2.2.26 (python 3.4.3-final-0, default/linux/x86/13.0/desktop,
> gcc-4.8.5, glibc-2.21-r2, 3.10.17-gentoo i686)
> =================================================================
> System uname:
> Linux-3.10.17-gentoo-i686-AMD_Athlon-TM-_XP_2500+-with-gentoo-2.2
> KiB Mem:     1034164 total,    221020 free
> KiB Swap:    2008120 total,   2007556 free
> Timestamp of repository gentoo: Sat, 05 Mar 2016 19:00:01 +0000
> sh bash 4.3_p42-r1
> ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
> ccache version 3.1.9 [disabled]
> app-shells/bash:          4.3_p42-r1::gentoo
> dev-java/java-config:     2.2.0::gentoo
> dev-lang/perl:            5.20.2::gentoo
> dev-lang/python:          2.7.10-r1::gentoo, 3.4.3-r1::gentoo
> dev-util/ccache:          3.1.9-r4::gentoo
> dev-util/cmake:           3.3.1-r1::gentoo
> dev-util/pkgconfig:       0.28-r2::gentoo
> sys-apps/baselayout:      2.2::gentoo
> sys-apps/openrc:          0.19.1::gentoo
> sys-apps/sandbox:         2.10-r1::gentoo
> sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
> sys-devel/automake:       1.10.3-r1::gentoo, 1.11.6-r1::gentoo,
> 1.14.1::gentoo, 1.15::gentoo
> sys-devel/binutils:       2.25.1-r1::gentoo
> sys-devel/gcc:            4.1.2::gentoo, 4.5.4::gentoo, 4.7.4::gentoo,
> 4.8.5::gentoo, 4.9.3::gentoo
> sys-devel/gcc-config:     1.7.3::gentoo
> sys-devel/libtool:        2.4.6::gentoo
> sys-devel/make:           4.1-r1::gentoo
> sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)
> sys-libs/glibc:           2.21-r2::gentoo
> Repositories:
> 
> gentoo
>     location: /usr/portage
>     sync-type: rsync
>     sync-uri: rsync://rsync.gentoo.org/gentoo-portage
>     priority: -1000
> 
> x-portage
>     location: /usr/local/portage
>     masters: gentoo
>     priority: 0
> 
> ACCEPT_KEYWORDS="x86"
> ACCEPT_LICENSE="* -@EULA PUEL dlj-1.1 Oracle-BCLA-JavaSE"
> CBUILD="i686-pc-linux-gnu"
> CFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
> CHOST="i686-pc-linux-gnu"
> CONFIG_PROTECT="/etc /usr/lib/fax /usr/share/gnupg/qualified.txt
> /var/spool/fax/etc"
> CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d
> /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release
> /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.6/ext-active/
> /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d
> /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d
> /etc/texmf/updmap.d /etc/texmf/web2c"
> CXXFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
> DISTDIR="/usr/portage/distfiles"
> EMERGE_DEFAULT_OPTS="--autounmask-write=y --keep-going --with-bdeps=y"
> FCFLAGS="-O2 -march=i686 -pipe"
> FEATURES="assume-digests binpkg-logs config-protect-if-modified
> distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch
> preserve-libs protect-owned sandbox sfperms strict unknown-features-warn
> unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
> FFLAGS="-O2 -march=i686 -pipe"
> GENTOO_MIRRORS="http://distro.ibidio.org/pub/linux/distributions/gentoo/
> ftp:///ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
> http://gentoo.osuosl.org/ http://mirror.datapipe.net/gentoo
> http://gentoo.binarycompass.org"
> LANG="en_US.UTF-8"
> LC_ALL="en_US.UTF-8"
> LDFLAGS="-Wl,-O1 -Wl,--as-needed"
> MAKEOPTS="-j1"
> PKGDIR="/usr/portage/packages"
> PORTAGE_CONFIGROOT="/"
> PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times
> --omit-dir-times --compress --force --whole-file --delete --stats
> --human-readable --timeout=180 --exclude=/distfiles --exclude=/local
> --exclude=/packages"
> PORTAGE_TMPDIR="/var/tmp"
> USE="X a52 aac acpi alsa apache2 berkdb bluetooth branding bzip2 cairo
> cdda cdr cgi cleartype cli consolekit corefonts cracklib crypt cups cxx
> dbus dri dts dvd dvdr emboss encode exif fam firefox flac foomaticdb
> fortran gdbm gif glamor gpm gtk hal iconv ipv6 java jpeg kpathsea lcms
> ldap libnotify mad mng modules mp3 mp4 mpeg mysql ncurses nls nptl ogg
> opengl openmp pam pango pcre pdf png policykit ppds qt3support readline
> scanner sdl seccomp semantic-desktop server session spell ssl
> startup-notification svg tcpd tetex thunar tiff truetype type1 udev
> udisks unicode upower usb vorbis wxwidgets x264 x86 xattr xcb xml xv
> xvid zlib" ABI_X86="32" ALSA_CARDS="via82xx" APACHE2_MODULES="actions
> alias auth_basic auth_digest authn_anon authn_dbd authn_dbm
> authn_default authn_file authz_dbm authz_default authz_groupfile
> authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock
> dbd deflate dir disk_cache env expires ext_filter file_cache filter
> headers ident imagemap include info log_config logio mem_cache mime
> mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect
> proxy_http rewrite setenvif so speling status unique_id userdir
> usertrack vhost_alias cgi" CALLIGRA_FEATURES="kexi words flow plan
> sheets stage tables krita karbon braindump author" CAMERAS="ptp2"
> COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog"
> CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext sse" ELIBC="glibc"
> GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt
> gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore
> rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx"
> INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz
> cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text"
> LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer"
> LINGUAS="en en_US" OFFICE_IMPLEMENTATION="libreoffice"
> PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7"
> PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21"
> USERLAND="GNU" VIDEO_CARDS="nv vesa fbdev" XTABLES_ADDONS="quota2 psd
> pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition
> tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
> Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK,
> PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS,
> PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
> 

Re: [gentoo-user] Failed to set XATTR_PAX markings

[netfab]

Le 06/03/16 à 10:14, thelma@sys-concept.com a tapoté :
> I've tried to use: USE=xattr in make.conf
> but it doesn't help.

If you don't use an official gentoo kernel, then your must patch your
kernel with this :

	https://gitweb.gentoo.org/proj/linux-patches.git/tree/1500_XATTR_USER_PREFIX.patch?h=4.1

Otherwise you will have such warnings when building many packages.

Re: [gentoo-user] Failed to set XATTR_PAX markings

[thelma]

Yes, I'm using official Gentoo kernel:
linux-3.10.17-gentoo

Though, this patch might not be in my Kernel. Which Kernel contain this
patch? Maybe I just should upgrade the kernel.

Thelma

On 03/06/2016 10:55 AM, netfab wrote:
> Le 06/03/16 à 10:14, thelma@sys-concept.com a tapoté :
>> I've tried to use: USE=xattr in make.conf
>> but it doesn't help.
> 
> If you don't use an official gentoo kernel, then your must patch your
> kernel with this :
> 
> 	https://gitweb.gentoo.org/proj/linux-patches.git/tree/1500_XATTR_USER_PREFIX.patch?h=4.1
> 
> Otherwise you will have such warnings when building many packages.
> 
> 
> 

Re: [gentoo-user] Failed to set XATTR_PAX markings

[netfab]

Le 06/03/16 à 11:04, thelma@sys-concept.com a tapoté :

> Yes, I'm using official Gentoo kernel:
> linux-3.10.17-gentoo
> 

You should update to 3.10.95 if you want to stay on this branch.
In fact all gentoo-sources kernel should contain this patch.

Your 3.10.17 old version was probably not built with it.

Re: [gentoo-user] Failed to set XATTR_PAX markings

[thelma]

On 03/06/2016 11:14 AM, netfab wrote:
> Le 06/03/16 à 11:04, thelma@sys-concept.com a tapoté :
> 
>> Yes, I'm using official Gentoo kernel:
>> linux-3.10.17-gentoo
>>
> 
> You should update to 3.10.95 if you want to stay on this branch.
> In fact all gentoo-sources kernel should contain this patch.
> 
> Your 3.10.17 old version was probably not built with it.

I upgraded to kernel: linux-4.1.15-gentoo-r1
but it did not help still getting same error message when compiling
these packages.

Thelma

[gentoo-user] Re: Failed to set XATTR_PAX markings

[Martin Vaeth]

thelma@sys-concept.com <thelma@sys-concept.com> wrote:
>
> grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
> CONFIG_TMPFS_XATTR=y

Does your compilation happen on a temp file system?
You can configure XATTR for each file system type individually.

[gentoo-user] Re: Failed to set XATTR_PAX markings

[Holger Hoffstätte]

On Mon, 07 Mar 2016 10:54:56 +0000, Martin Vaeth wrote:

> thelma@sys-concept.com <thelma@sys-concept.com> wrote:
>>
>> grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
>> CONFIG_TMPFS_XATTR=y
> 
> Does your compilation happen on a temp file system?
> You can configure XATTR for each file system type individually.

If the final filesystem is ext4 then CONFIG_EXT4_FS_SECURITY must also
be set, otherwise you'll get the error again.

-h

Re: [gentoo-user] Re: Failed to set XATTR_PAX markings

[thelma]

On 03/07/2016 03:54 AM, Martin Vaeth wrote:
> thelma@sys-concept.com <thelma@sys-concept.com> wrote:
>>
>> grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
>> CONFIG_TMPFS_XATTR=y
> 
> Does your compilation happen on a temp file system?
> You can configure XATTR for each file system type individually.

No, in fstab my tempfs is OFF

#shm			/dev/shm	tmpfs		nodev,nosuid,noexec	0 0


Thelma

Re: [gentoo-user] Re: Failed to set XATTR_PAX markings

[thelma]

On 03/07/2016 04:23 AM, Holger Hoffstätte wrote:
> On Mon, 07 Mar 2016 10:54:56 +0000, Martin Vaeth wrote:
> 
>> thelma@sys-concept.com <thelma@sys-concept.com> wrote:
>>>
>>> grep CONFIG_TMPFS_XATTR /usr/src/linux/.config
>>> CONFIG_TMPFS_XATTR=y
>>
>> Does your compilation happen on a temp file system?
>> You can configure XATTR for each file system type individually.
> 
> If the final filesystem is ext4 then CONFIG_EXT4_FS_SECURITY must also
> be set, otherwise you'll get the error again.
> 

This system is using ext3

Thelma