http://bugs.gentoo.org/196720 mark the new "e" fopen() flag as safe --- sandbox-1.2.18.1/src/libsandbox.c +++ sandbox-1.2.18.1/src/libsandbox.c @@ -1595,7 +1595,7 @@ { if (*mode == 'r' && (0 == (strcmp(mode, "r")) || /* The strspn accept args are known non-writable modifiers */ - (strlen(++mode) == strspn(mode, "xbtmc")))) { + (strlen(++mode) == strspn(mode, "xbtmce")))) { return before_syscall("open_rd", file); } else { return before_syscall("open_wr", file);