From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: permission denied: /gnu/store/...guile... Date: Thu, 21 May 2015 10:03:23 +0200 Message-ID: <87382q8iic.fsf@gnu.org> References: <14d70199695.1243810498111.5252599218489536710@elephly.net> <87zj4zbfxk.fsf@gnu.org> <14d731d6c62.1217a38e2105373.2722327377786941574@elephly.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49950) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YvLS1-0007tg-Vb for guix-devel@gnu.org; Thu, 21 May 2015 04:03:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YvLRx-0007aQ-Jf for guix-devel@gnu.org; Thu, 21 May 2015 04:03:33 -0400 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:47033) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YvLRx-0007aL-GE for guix-devel@gnu.org; Thu, 21 May 2015 04:03:29 -0400 In-Reply-To: <14d731d6c62.1217a38e2105373.2722327377786941574@elephly.net> (rekado@elephly.net's message of "Thu, 21 May 2015 04:56:57 +0800") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: rekado Cc: guix-devel@gnu.org rekado skribis: >>> Derive([("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-ibus-pinyin= -1.5.0.tar.gz","sha256","a85d458dcc51ea9fd65849e63002428b3fcb3b39adcbea9214= b5cb4a4cbdbc96")],[("/gnu/store/479gki04zgbysxipcb1wdl56mh1bldbx-guile-2.0.= 11.drv",["out"]),("/gnu/store/p20cih7k80cpqka6f06100j1ycgf3fl1-module-impor= t.drv",["out"]),("/gnu/store/s8bacxxryg87p2ag6gl46qz6jvpdm5qs-gnutls-3.4.0.= drv",["out"]),("/gnu/store/w9g2dqsfgr6n8pslwmm2lgbka96qwig4-module-import-c= ompiled.drv",["out"])],["/gnu/store/yhds5m08mgp3a3yb2gj9imn7pkap0fc1-ibus-p= inyin-1.5.0.tar.gz-builder"],"x86_64-linux","/gnu/store/cnqmkmj40jmssnx6fkf= 9n0n3bqj5x426-guile-2.0.11/bin/guile",["--no-auto-compile","-L","/gnu/store= /6fnbs4j7dsn6rc598d72caay00yggvh7-module-import","-C","/gnu/store/ww9kwrbs4= h468vll6a3swg6dc3hr9f8i-module-import-compiled","/gnu/store/yhds5m08mgp3a3y= b2gj9imn7pkap0fc1-ibus-pinyin-1.5.0.tar.gz-builder"],[("impureEnvVars","htt= p_proxy https_proxy"),("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-i= bus-pinyin-1.5.0.tar.gz")])=20 >>=20 >>However I don=E2=80=99t see this derivation mention in the strace log. > > Oh, right. The strace log shows the output for another package I'm worki= ng on, "gnome-keyring". There are only two things it has in common with "i= bus-pinyin": there is no binary substitute available and I get the same err= or about "permission denied" when executing guile. Could you post the output of =E2=80=9Cstat /gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/= guile=E2=80=9D? What do the following return at the Guile REPL: (getgr 30000) (getpw 30001) ? > The strace log is here: http://elephly.net/downies/guile-permission-denie= d2.txt Note that here, since it=E2=80=99s a fixed-output derivation, there=E2=80= =99s no chroot, unshare, etc., so it=E2=80=99s really just UID 30001 running that file. Something equivalent to: # su guixbuilder01 $ /gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile > ~~~~~~~~ > rekado@banana guix $ sudo ls > sudo: unable to stat /etc/sudoers: Permission denied > sudo: no valid sudoers sources found, quitting > sudo: unable to initialize policy plugin Same with: /run/setuid-programs/sudo ls ? Does /run/setuid-programs/sudo have the same inode as $(guix build sudo)/bin/sudo? stat -c '%i' /run/setuid-programs/sudo \ $(guix build sudo)/bin/sudo The only partitions are / and /home, right? Thanks, Ludo=E2=80=99.