bug#42859: guix lint: permission denied for cve checker

bug#42859: guix lint: permission denied for cve checker

[Jonathan Brielmaier]

When running guix lint with the cve checker I get the following error:

```
guix lint icecat --checkers=cve
fetching CVE database for 2020...view1 [cve]...
Backtrace:
          12 (primitive-load "/home/jonathan/.config/guix/current/bi?")
In guix/ui.scm:
  2046:12 11 (run-guix-command _ . _)
In srfi/srfi-1.scm:
    634:9 10 (for-each #<procedure 7fe83940afc0 at guix/scripts/lin?> ?)
In guix/scripts/lint.scm:
     60:4  9 (run-checkers #<package icecat@68.11.0-guix0-preview1 ?> ?)
In srfi/srfi-1.scm:
    634:9  8 (for-each #<procedure 7fe83094da20 at guix/scripts/lin?> ?)
In guix/scripts/lint.scm:
    69:21  7 (_ _)
In guix/lint.scm:
   1110:4  6 (check-vulnerabilities #<package icecat@68.11.0-guix0-?> ?)
   1102:9  5 (_ _)
In unknown file:
           4 (force #<promise #<procedure 7fe8387c8820 at guix/lint.?>)
In guix/lint.scm:
   1085:2  3 (_)
   1044:2  2 (call-with-networking-fail-safe _ _ _)
In ice-9/boot-9.scm:
  1736:10  1 (with-exception-handler _ _ #:unwind? _ # _)
  1669:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1669:16: In procedure raise-exception:
In procedure mkdir: Permission denied
```

I'm on a pretty new guix and I did observe this issue for quite a while:
```
guix describe
  guix 697e54b
    Repository-URL: https://git.savannah.gnu.org/git/guix.git
    Branch: master
    Commit: 697e54b2a16575afa9457456fa2a27b0e5895caa
```

bug#42859: guix lint: permission denied for cve checker

[Leo Famulari]

On Fri, Aug 14, 2020 at 02:26:03PM +0200, Jonathan Brielmaier wrote:
> When running guix lint with the cve checker I get the following error:
> 
> ```
> guix lint icecat --checkers=cve
> fetching CVE database for 2020...view1 [cve]...
[...]
> In procedure mkdir: Permission denied
> ```

Do you know which directory that is? You can run the comand with `strace
-f` to check.

It works for me on Debian...

bug#42859: guix lint: permission denied for cve checker

[Jonathan Brielmaier]

On 14.08.20 20:27, Leo Famulari wrote:
> On Fri, Aug 14, 2020 at 02:26:03PM +0200, Jonathan Brielmaier wrote:
>> When running guix lint with the cve checker I get the following error:
>>
>> ```
>> guix lint icecat --checkers=cve
>> fetching CVE database for 2020...view1 [cve]...
> [...]
>> In procedure mkdir: Permission denied
>> ```
>
> Do you know which directory that is? You can run the comand with `strace
> -f` to check.

Ah thanks for that hint!

[...]
[pid 20797] mkdir("/home/jonathan/.cache/guix", 0777) = -1 EEXIST (Die
Datei existiert bereits)
[pid 20797] mkdir("/home/jonathan/.cache/guix/http", 0777) = -1 EACCES
(Keine Berechtigung)
[pid 20797] write(2, "Backtrace:\n", 11Backtrace:
) = 11
[...]

ll /home/jonathan/.cache/guix
insgesamt 8
drwxr-xr-x 3 root root 4096 17. Jun 00:00 authentication/
drwxr-xr-x 6 root root 4096  7. Jun 11:53 checkouts/

So i wonder now why it's owned by root and not by jonathan:users like
the rest (apart from guile) in ~/.cache/

bug#42859: guix lint: permission denied for cve checker

[Ludovic Courtès]

Jonathan Brielmaier <jonathan.brielmaier@web.de> skribis:

> On 14.08.20 20:27, Leo Famulari wrote:
>> On Fri, Aug 14, 2020 at 02:26:03PM +0200, Jonathan Brielmaier wrote:
>>> When running guix lint with the cve checker I get the following error:
>>>
>>> ```
>>> guix lint icecat --checkers=cve
>>> fetching CVE database for 2020...view1 [cve]...
>> [...]
>>> In procedure mkdir: Permission denied
>>> ```
>>
>> Do you know which directory that is? You can run the comand with `strace
>> -f` to check.
>
> Ah thanks for that hint!
>
> [...]
> [pid 20797] mkdir("/home/jonathan/.cache/guix", 0777) = -1 EEXIST (Die
> Datei existiert bereits)
> [pid 20797] mkdir("/home/jonathan/.cache/guix/http", 0777) = -1 EACCES
> (Keine Berechtigung)
> [pid 20797] write(2, "Backtrace:\n", 11Backtrace:
> ) = 11
> [...]
>
> ll /home/jonathan/.cache/guix
> insgesamt 8
> drwxr-xr-x 3 root root 4096 17. Jun 00:00 authentication/
> drwxr-xr-x 6 root root 4096  7. Jun 11:53 checkouts/
>
> So i wonder now why it's owned by root and not by jonathan:users like
> the rest (apart from guile) in ~/.cache/

Perhaps you previously ran “sudo guix lint -c cve” or something?

Commit 4c5edee1ef2aff2b8f3782ccb03723a6428bf600 leads to a clearer error
message pointing at the faulty directory permissions.

I think we’re done?

Thanks,
Ludo’.

bug#42859: guix lint: permission denied for cve checker

[Maxim Cournoyer]

Hi,

Ludovic Courtès <ludo@gnu.org> writes:

> Jonathan Brielmaier <jonathan.brielmaier@web.de> skribis:
>
>> On 14.08.20 20:27, Leo Famulari wrote:
>>> On Fri, Aug 14, 2020 at 02:26:03PM +0200, Jonathan Brielmaier wrote:
>>>> When running guix lint with the cve checker I get the following error:
>>>>
>>>> ```
>>>> guix lint icecat --checkers=cve
>>>> fetching CVE database for 2020...view1 [cve]...
>>> [...]
>>>> In procedure mkdir: Permission denied
>>>> ```
>>>
>>> Do you know which directory that is? You can run the comand with `strace
>>> -f` to check.
>>
>> Ah thanks for that hint!
>>
>> [...]
>> [pid 20797] mkdir("/home/jonathan/.cache/guix", 0777) = -1 EEXIST (Die
>> Datei existiert bereits)
>> [pid 20797] mkdir("/home/jonathan/.cache/guix/http", 0777) = -1 EACCES
>> (Keine Berechtigung)
>> [pid 20797] write(2, "Backtrace:\n", 11Backtrace:
>> ) = 11
>> [...]
>>
>> ll /home/jonathan/.cache/guix
>> insgesamt 8
>> drwxr-xr-x 3 root root 4096 17. Jun 00:00 authentication/
>> drwxr-xr-x 6 root root 4096  7. Jun 11:53 checkouts/
>>
>> So i wonder now why it's owned by root and not by jonathan:users like
>> the rest (apart from guile) in ~/.cache/
>
> Perhaps you previously ran “sudo guix lint -c cve” or something?
>
> Commit 4c5edee1ef2aff2b8f3782ccb03723a6428bf600 leads to a clearer error
> message pointing at the faulty directory permissions.
>
> I think we’re done?

I think so!  Closing.

Thanks,

Maxim