Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 191060 - net-analyzer/rrdtool-1.2.23-r1 - relative DT_RPATH
Summary: net-analyzer/rrdtool-1.2.23-r1 - relative DT_RPATH
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-09-02 14:57 UTC by Pacho Ramos
Modified: 2008-01-27 20:47 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
rrdtool-bindings-build-cleanup.patch (rrdtool-bindings-build-cleanup.patch,24.98 KB, patch)
2007-09-06 23:25 UTC, SpanKY
Details | Diff
rrdtool-bindings-build-cleanup.patch (rrdtool-bindings-build-cleanup.patch,1.55 KB, patch)
2007-09-06 23:27 UTC, SpanKY
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2007-09-02 14:57:36 UTC
When I try to merge rrdtool I get:

scanelf: rpath_security_checks(): Security problem with relative DT_RPATH
'../../src/.libs:/usr/lib64' in
/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/image/usr/lib/ruby/1.8/x86_64-linux/RRD.so
scanelf: rpath_security_checks(): Security problem with relative DT_RUNPATH
/'../../src/.libs:/usr/lib64' in
/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/image/usr/lib/ruby/1.8/x86_64-linux/RRD.so
scanelf: rpath_security_checks(): Security problem with relative DT_RPATH
'../../src/.libs' in
/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/image/usr/lib64/python2.4/site-packages/rrdtoolmodule.so
scanelf: rpath_security_checks(): Security problem with relative DT_RUNPATH
/'../../src/.libs' in
/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/image/usr/lib64/python2.4/site-packages/rrdtoolmodule.so
removing executable bit: usr/lib64/librrd.la
removing executable bit: usr/lib64/librrd_th.la
Files matching a file type that is not allowed:
   usr/lib/ruby/1.8/x86_64-linux/RRD.so

!!! ERROR: net-analyzer/rrdtool-1.2.23-r1 failed.
Call stack:
  misc-functions.sh, line 561:   Called install_qa_check
  misc-functions.sh, line 341:   Called die

!!! multilib-strict check failed!
!!! If you need support, post the topmost build error, and the call stack if
!!! relevant.
!!! A complete build log is located at
!!! '/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/temp/build.log'.

!!! install_qa_check failed; exiting.

My emerge --info:
Portage 2.1.2.12 (default-linux/amd64/2007.0, gcc-4.1.2, glibc-2.5-r4, 2.6.22-gentoo-r1-2 x86_64)
=================================================================
System uname: 2.6.22-gentoo-r1-2 x86_64 AMD Athlon(tm) 64 Processor 3200+
Gentoo Base System release 1.12.9
Timestamp of tree: Sat, 01 Sep 2007 20:30:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p17
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 1.12.9-r2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2 -pipe -msse3"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-march=k8 -O2 -pipe -msse3"
DISTDIR="/usr/distfiles"
FEATURES="autoaddcvs ccache collision-protect cvs distlocks metadata-transfer multilib-strict parallel-fetch sandbox sfperms strict"
GENTOO_MIRRORS="http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/"
LANG="es_ES.UTF-8"
LC_ALL="es_ES.UTF-8"
LINGUAS="es en_US"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/musicbrainz /usr/portage/local/layman/sunrise /usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X a52 aac acpi alsa amd64 arts asf audiofile avahi bash-completion beagle bitmap-fonts bzip2 bzlib cairo caps cdb cdda cddb cdparanoia cdr cli cpdflib cpudetection cracklib cross crypt cups curl daap dbus dga divx4linux dlloader dri dts dvb dvd dvdr dvdread eds encode erandom escreen esd evo evolution exif fam fbcon flac foomaticdb fortran ftp galago gb gcj ggi gif gimp gimpprint glitz glut glx gnome gnome-print gphoto2 gpm gstreamer gtk gtk2 gtkhtml hal iconv idn imagemagick imlib isdnlog ithreads jabber java jpeg kde kdeenablefinal kdehiddenvisibility latex lcms libnotify logrotate mad madwifi midi mikmod mime mmx mmxext mng mono motif mp3 mpeg mpi mplayer mudflap musepack musicbrainz nas nautilus ncurses nethack network nls nocardbus nptl nptlonly nvidia ogg oggvorbis openal opengl openmp pam pcre pdf perl pic plotutils png posix ppds pppd python qt3 qt4 quicktime readline reflection rtc ruby scanner sdl seamonkey session slang slp sockets spell spl sse sse2 sse3 ssl startup-notification svg sysvipc tcltk tcpd tetex theora threads tiff timidity tk totem trayicon truetype truetype-fonts type1-fonts unicode usb v4l v4l2 vcd videos vim vorbis wma wmf xcomposite xine xml xml2 xorg xpm xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="es en_US" USERLAND="GNU" VIDEO_CARDS="nvidia nv vesa fbdev vga"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS


Reproducible: Always
Comment 1 Markus Ullmann (RETIRED) gentoo-dev 2007-09-06 08:35:17 UTC
RPATH=$(exec_prefix)/lib

so I'd say that env var gets messed up somehow..

vapier, master of autotools foo, can you advise? ;)
Comment 2 SpanKY gentoo-dev 2007-09-06 21:58:48 UTC
when building, libtool based projects will add relative RPATH's so that you can run the code in the builddir ... however, the `make install` step should have libtool force a relink without the RPATH so whatever is placed in DESTDIR lacks the ugly relative dirs ...
Comment 3 SpanKY gentoo-dev 2007-09-06 22:57:06 UTC
although in this case, it just looks like a crappy integration of ruby/perl/python bindings ...
Comment 4 SpanKY gentoo-dev 2007-09-06 23:25:50 UTC
Created attachment 130226 [details, diff]
rrdtool-bindings-build-cleanup.patch

this should fix up things and should be OK to send upstream ... it also fixes some parallel install failures i saw on my machine
Comment 5 SpanKY gentoo-dev 2007-09-06 23:27:55 UTC
Created attachment 130228 [details, diff]
rrdtool-bindings-build-cleanup.patch

try this again, but minus the generated file crap
Comment 6 Pacho Ramos gentoo-dev 2007-10-19 13:12:58 UTC
(In reply to comment #5)
> Created an attachment (id=130228) [edit]
> rrdtool-bindings-build-cleanup.patch
> 
> try this again, but minus the generated file crap
> 

with this patch I get this error:
ecompressdir: bzip2 -9 usr/share/man
strip: x86_64-pc-linux-gnu-strip --strip-unneeded -R .comment
   usr/lib/ruby/1.8/x86_64-linux/RRD.so
   usr/bin/rrdupdate
   usr/bin/rrdtool
   usr/lib64/python2.4/site-packages/rrdtoolmodule.so
   usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/auto/RRDs/RRDs.so
   usr/lib64/librrd_th.so.2.0.8
   usr/lib64/librrd.so.2.0.10
   usr/lib64/librrd_th.a
   usr/lib64/librrd.a
removing executable bit: usr/lib64/librrd.la
removing executable bit: usr/lib64/librrd_th.la
Files matching a file type that is not allowed:
   usr/lib/ruby/1.8/x86_64-linux/RRD.so
 *
 * ERROR: net-analyzer/rrdtool-1.2.23-r1 failed.
 * Call stack:
 *   misc-functions.sh, line 566:   Called install_qa_check
 *   misc-functions.sh, line 342:   Called die
 *
 * multilib-strict check failed!
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/var/tmp/portage/net-analyzer/rrdtool-1.2.23-r1/temp/build.log'.
 *
Comment 7 SpanKY gentoo-dev 2007-10-20 04:15:45 UTC
unrelated
Comment 8 Pacho Ramos gentoo-dev 2007-10-20 11:58:27 UTC
Should I open other bug report for that problem?

Thanks for info :-)
Comment 9 Peter Volkov (RETIRED) gentoo-dev 2008-01-27 20:47:43 UTC
Thank you for report. This bug is fixed in rrdtool-1.2.26 by upstream. Thank you all for your work here.

Mike/vapier, if you manage to reproduce that parallel build failures again, please, report them. I do not see them with 1.2.26 but reproducibility sometimes is the problem with parallel build errors...