On středa 29. října 2025 15:20:26, středoevropský standardní čas Pavel Raiskup 
wrote:
> On pondělí 11. srpna 2025 0:08:23, středoevropský standardní čas Orion 
> Poplawski wrote:
> > I use centos stream 9 for my primary laptop.  I'm trying to build some 
> > Fedora Rawhide packages in mock.  When rpm is trying to uncompress xz 
> > tar balls I get:
> > 
> > + /usr/lib/rpm/rpmuncompress -x 
> > /builddir/build/SOURCES/gdal-3.11.3-fedora.tar.xz
> > /usr/bin/xz: Failed to enable the sandbox
> > 
> > Any clue as to what is causing this?  I'm not seeing any obvious SELinux 
> > errors.
> 
> I was pointed to this e-mail today.  This seems like the EL9 kernel is just 
> too
> old to run `xz` built for rawhide.
> 
> <mock-rawhide-shell-on-el9-box> $ strace xz -d gdal-3.11.4-fedora.tar.xz
> prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)  = 0
> landlock_create_ruleset(NULL, 0, LANDLOCK_CREATE_RULESET_VERSION) = 6
> landlock_create_ruleset({handled_access_fs=LANDLOCK_ACCESS_FS_EXECUTE|LANDLOCK_ACCESS_FS_REMOVE_DIR|LANDLOCK_ACCESS_FS_MAKE_CHAR|LANDLOCK_ACCESS_FS_MAKE_DIR|LANDLOCK_ACCESS_FS_MAKE_SOCK|LANDLOCK_ACCESS_FS_MAKE_FIFO|LANDLOCK_ACCESS_FS_MAKE_BLOCK|LANDLOCK_ACCESS_FS_MAKE_SYM|LANDLOCK_ACCESS_FS_REFER|LANDLOCK_ACCESS_FS_TRUNCATE|LANDLOCK_ACCESS_FS_IOCTL_DEV,
>  
> handled_access_net=LANDLOCK_ACCESS_NET_BIND_TCP|LANDLOCK_ACCESS_NET_CONNECT_TCP,
>  scoped=LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET|LANDLOCK_SCOPE_SIGNAL}, 24, 0) = 
> -1 EINVAL (Invalid argument)
> ...

I opened this bug to let XZ maintainers know:
https://bugzilla.redhat.com/show_bug.cgi?id=2407105

Pavel


> Pavel
> 
> 
> 
> 
> 
> > 
> > 
> 




-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to