[Solved] glib test_find_program_for_path writes to /tmp

[bschnzl]

This is posted here for documentation

With FEATURE="test" and USE="test"
emerge dev-libs/glib -v
gives:

Summary of Failures:

88/335 glib:glib+core / utils ERROR 0.02s killed by signal 6 SIGABRT
120/335 glib:glib+core+cc / utils-c-11 ERROR 0.03s killed by signal 6 SIGABRT
121/335 glib:glib+core+cc / utils-c-17 ERROR 0.03s killed by signal 6 SIGABRT
122/335 glib:glib+core+cc / utils-c-90 ERROR 0.02s killed by signal 6 SIGABRT
123/335 glib:glib+core+cc / utils-c-99 ERROR 0.02s killed by signal 6 SIGABRT
281/335 glib:gio / file ERROR 0.10s killed by signal 6 SIGABRT

#281 is covered in https://bugs.gentoo.org/907079, which should be FIXED with dev-libs/glib-2.78.1.
setting ~amd64, and including dev-util/gdbus-codegen-2.78 passed the test.

The other five failed because /tmp was `mount -o noexec`.
https://gitlab.gnome.org/GNOME/glib/-/issues/3179 was posted to address this.
I adjusted /etc/fstab and rebooted. Once the ~amd64 flag was set, everthing merged nicely.

The following are three references regarding /tmp:
https://www.tenable.com/audits/items/CIS_Debian_Family_Linux_v1.0.0_L1_Workstation.audit:5770ef66cb92c88dc10736e47765f1de
https://discuss.elastic.co/t/logstash-will-not-start-with-tmp-mounted-noexec/324125
https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2022-09-07/finding/V-230511

Even glib from gnome qualifies as an "internet download". The "STIGS" are meant to be applied across the board. This is a CAT2 finding.
HTH
_________________
Persistance Pays