{"action":"created","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/21327","repository_url":"https://api.github.com/repos/NixOS/nixpkgs","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/21327/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/21327/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/21327/events","html_url":"https://github.com/NixOS/nixpkgs/issues/21327","id":196834297,"number":21327,"title":"buildFHSUserEnv doesn't work for non-root users in grsecurity","user":{"login":"spacekitteh","id":1940652,"avatar_url":"https://avatars.githubusercontent.com/u/1940652?v=3","gravatar_id":"","url":"https://api.github.com/users/spacekitteh","html_url":"https://github.com/spacekitteh","followers_url":"https://api.github.com/users/spacekitteh/followers","following_url":"https://api.github.com/users/spacekitteh/following{/other_user}","gists_url":"https://api.github.com/users/spacekitteh/gists{/gist_id}","starred_url":"https://api.github.com/users/spacekitteh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spacekitteh/subscriptions","organizations_url":"https://api.github.com/users/spacekitteh/orgs","repos_url":"https://api.github.com/users/spacekitteh/repos","events_url":"https://api.github.com/users/spacekitteh/events{/privacy}","received_events_url":"https://api.github.com/users/spacekitteh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-12-21T02:58:12Z","updated_at":"2016-12-24T03:11:48Z","closed_at":null,"body":"## Issue description\r\nTrying to set up an AOSP build environment to nix-shell into. nix-shelling into it with a non-root user errors out. It succeeds with root and sudo.\r\n\r\n\r\n\r\n### Steps to reproduce\r\nshell.nix:\r\n``` nix\r\n{ pkgs ? import <nixpkgs> {} }:\r\n\r\nlet\r\n  jdk = pkgs.jdk8;\r\n  fhs = pkgs.buildFHSUserEnv {\r\n    name = \"android-env\";\r\n    targetPkgs = pkgs: with pkgs;\r\n      [ git\r\n        gitRepo\r\n        gnupg1\r\n        python2\r\n        curl\r\n        procps\r\n        openssl\r\n        gnumake\r\n        nettools\r\n        androidenv.platformTools\r\n        ccache\r\n        ncurses\r\n        jdk\r\n        schedtool\r\n        utillinux\r\n        m4\r\n        gperf\r\n        perl\r\n        libxml2\r\n        zip\r\n        unzip\r\n        bison\r\n        flex\r\n        lzop\r\n        bc\r\n        which\r\n        gcc\r\n      ];\r\n    multiPkgs = pkgs: with pkgs;\r\n      [ zlib\r\n      ];\r\n    extraOutputsToInstall = [ \"dev\" ];\r\n    runScript = \"bash\";\r\n    profile = ''\r\n      export USE_CCACHE=1\r\n      export ANDROID_JAVA_HOME=${jdk.home}\r\n    '';\r\n  };\r\nin fhs.env\r\n```\r\n``` bash\r\n[spacekitteh@spaceserv:~/code/copperhead]$ nix-shell\r\n/nix/store/qxdag2fs1qh4alr19ax3s9lqh5dw2m24-chroot-user:44:in `block in make_fcall': Operation not permitted (Errno::EPERM)\r\n        from /nix/store/qxdag2fs1qh4alr19ax3s9lqh5dw2m24-chroot-user:114:in `<main>'\r\n```\r\n\r\n\r\n\r\n## Technical details\r\n\r\n* System: 17.03pre96925.1c50bdd (Gorilla)\r\n* uname -a: Linux spaceserv 4.8.14-grsec #1-NixOS SMP Sat Dec 10 18:09:59 UTC 2016 x86_64 GNU/Linux\r\n* Nix version: nix-env (Nix) 1.11.4\r\n* Nixpkgs version:\"17.03pre96925.1c50bdd\"\r\n"},"comment":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/comments/269066294","html_url":"https://github.com/NixOS/nixpkgs/issues/21327#issuecomment-269066294","issue_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/21327","id":269066294,"user":{"login":"spacekitteh","id":1940652,"avatar_url":"https://avatars.githubusercontent.com/u/1940652?v=3","gravatar_id":"","url":"https://api.github.com/users/spacekitteh","html_url":"https://github.com/spacekitteh","followers_url":"https://api.github.com/users/spacekitteh/followers","following_url":"https://api.github.com/users/spacekitteh/following{/other_user}","gists_url":"https://api.github.com/users/spacekitteh/gists{/gist_id}","starred_url":"https://api.github.com/users/spacekitteh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spacekitteh/subscriptions","organizations_url":"https://api.github.com/users/spacekitteh/orgs","repos_url":"https://api.github.com/users/spacekitteh/repos","events_url":"https://api.github.com/users/spacekitteh/events{/privacy}","received_events_url":"https://api.github.com/users/spacekitteh/received_events","type":"User","site_admin":false},"created_at":"2016-12-24T03:11:48Z","updated_at":"2016-12-24T03:11:48Z","body":"Ah, okay. So does that mean the env.rb file has to be rewritten in C or something, or?"}}
{"actor":{"display_login":"spacekitteh"}}