[Bug driver/78206] New: bootstrap failure under Apple sandbox that blacklists reads in /usr/local

[howarth.at.gcc at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=78206

            Bug ID: 78206
           Summary: bootstrap failure under Apple sandbox that blacklists
                    reads in /usr/local
           Product: gcc
           Version: 6.2.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: driver
          Assignee: unassigned at gcc dot gnu.org
          Reporter: howarth.at.gcc at gmail dot com
  Target Milestone: ---

I ran into a rather interesting bootstrap failure for all FSF gcc releases when
performed under an Apple sandbox configured to blacklist reads in /usr/local.
The libgcc configure run using the stage1 xgcc compiler fails with the error...

configure:3462: /sw/src/fink.build/gcc6-6.2.0-2/darwin_objdir/./gcc/xgcc
-B/sw/src/fink.build/gcc6-6.2.0-2/darwin_objdir/./gcc/
-B/sw/lib/gcc6/x86_64-apple-darwin15.6.0/bin/
-B/sw/lib/gcc6/x86_64-apple-darwin15.6.0/lib/ -isystem
/sw/lib/gcc6/x86_64-apple-darwin15.6.0/include -isystem
/sw/lib/gcc6/x86_64-apple-darwin15.6.0/sys-include    -o conftest -g -O2  
conftest.c  >&5
cc1: error: /usr/local/include: Operation not permitted

This bootstrap failure is suppressed if the configure option
--with-local-prefix=/sw or --with-local-prefix=/ is passed under the sandbox
build.

I assume cc1 is performing an stat() call on the /usr/include directory which
fails  in an unrecoverable manner due to the sandbox.

Note the Apple sandbox in this case was run with 'sandbox-exec -f fink.sb'
where the fink.sb file contained...

(version 1)

(allow default)

(deny file*
       (subpath "/usr/local")
)