search

vn971 / rua

Build tool for Arch Linux providing control, review and jailed build options
GNU General Public License v3.0
421 stars 38 forks source link

python-blis 0.7.7-1 error when building #183

Open ac0mplex opened 2 years ago

ac0mplex commented 2 years ago

Hey,

I've been trying to build a package python-blis (0.7.7-1) but had no luck with rua - whenever I try to do so, build() returns an error:

/home/cosmic/.cache/rua/build/python-blis/PKGBUILD: line 22:  1097 Bad system call         (core dumped) python setup.py build

I believe this might have to do something with rua because I can build this package just fine with makepkg -si.

Can anyone confirm this is not an issue on my end?

vn971 commented 2 years ago

Hi @sadsumi ! This probably happened due to, indeed, making a "disallowed" system call. rua forbids certain system calls for security reasons, see this list if you want to know which ones: https://github.com/vn971/rua/blob/master/build.rs#L81

Currently, making an exclusion to allow certain system calls or packages is not supported, so you might be better off building that package without a security jail (e.g. another tool or makepkg -si) if you fully trust it

vn971 commented 2 years ago

Sounds like pretty nice package though, it's a bummer that the system calls don't match the expectations. Even curious what was denied after all

vn971 commented 2 years ago

If you know how to configure kernel audit and grep for system call deny's, I'd be curious to learn. However, I can't provide full guidance here, and there's a big chance it won't help (although who knows)