# emerge --info Portage 2.1.8.3 (selinux/2007.0/amd64, gcc-3.4.3, glibc-2.3.4.20041102-r1, 2.6.11-hardened-r13 x86_64) ================================================================= System uname: Linux-2.6.11-hardened-r13-x86_64-AMD_Opteron-tm-_Processor_248-with-gentoo-1.6.12 Timestamp of tree: Tue, 20 Apr 2010 12:00:01 +0000 app-shells/bash: 4.1_p5 dev-lang/python: 2.4.3-r4, 2.6.4-r1 dev-python/pycrypto: 2.0.1-r6 sys-apps/baselayout: 1.11.12-r4 sys-apps/sandbox: 2.2 sys-devel/autoconf: 2.13, 2.63-r1 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5, 1.10.3, 1.11.1 sys-devel/binutils: 2.18-r3 sys-devel/gcc: 3.4.3-r1 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.6b virtual/os-headers: 2.6.30-r1 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/sandbox.d /etc/terminfo /etc/texmf/web2c" CXXFLAGS="-O2" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests distlocks fixpackages loadpolicy news parallel-fetch protect-owned sandbox selinux sesandbox sfperms strict unmerge-logs unmerge-orphans userfetch" GENTOO_MIRRORS="http://mirror.hamakor.org.il/pub/mirrors/gentoo/" LDFLAGS="-Wl,-O1" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="amd64 apache2 berkdb calendar cli cracklib crypt cxx dri exif fortran ftp gd geoip gif gpm hardened iconv imagemagick innodb ipv6 jpeg lm_sensors memlimit mmap mmx modules mudflap ncurses nls openmp pam pcre perl php pic pppd python readline reflection selinux session spl sqlite sse sse2 ssl tcpd tiff truetype xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="access auth auth_dbm auth_anon auth_digest auth_basic authn_alias authn_anon authn_default authn_file authz_default authz_groupfile authz_host authz_owner authz_user alias file-cache echo charset-lite cache disk-cache mem-cache ext-filter case_filter case-filter-in deflate mime-magic cern-meta expires headers usertrack unique-id proxy proxy-connect proxy-ftp proxy-http info include cgi cgid dav dav-fs vhost-alias speling rewrite log_config logio env setenvif mime status autoindex asis negotiation dir imap actions userdir so suexec mime_magic version unique_id filter" APACHE2_MPMS="prefork" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa via vmware voodoo" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Created attachment 228521 [details] /var/tmp/portage/net-irc/unrealircd-3.2.8.1/temp/build.log
It is to be noted that 3.2.7-r2 configures, compiles and installs just fine on the very same box. However, a known DoS is in the wild, so that's not an acceptable solution :-)
Your build log states !!! SELinux module not found. Please verify that it was installed. Please check here: http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=3 if this can solve the issue for you. In particular take a look at: 3.d. Portage error messages : I get a missing SELinux module error when using emerge: This indicates that the portage SELinux module is missing or damaged. Also python may have been upgraded to a new version which requires python-selinux to be recompiled. Remerge dev-python/python-selinux. If packages have been merged under this condition, they must be relabed after fixing this condition. If the packages needing to be remerged cannot be determined, a full relabel may be required. Regards, Thomas
Please ignore the SELinux... It's totally unrelated IMHO. It's just OFF, for a while ago, now. I looked inside the 'configure' script extracted from the package - and the error clearly states a line that actually appears there and I wonder if it really should. Googling for the name of this PKG_whatever with 'unrealircd' gave me just one result: The patch in Gentoo's tree. Maybe related to this 'tre' that was moved from Unreal's original implementation (included with the dist) and 'use the external package which is in portage' ? Can YOU merge this package successfully ?
(In reply to comment #4) > Can YOU merge this package successfully ? Yes, no issues here. Assigning..., maybe the irc-herd knows what's going on.
Created attachment 234903 [details, diff] adds dev-util/pkgconfig dep Sorry that I overlooked this. My ebuilds for bug 260806 introduced a call to eautoreconf and unrealircd uses pkgconfig (thus the undefined macro if the user doesn't have pkgconfig installed). This patch adds the missing buildtime pkgconfig dep and makes two tiny quoting stylistic changes ;-).
oh, forgot to mention: If you're applying this patch, please also regenerate the manifest as Unreal3.2.8.1.tar.gz changed upstream (but it's a very insignificant change) :-/
(In reply to comment #7) > oh, forgot to mention: If you're applying this patch, please also regenerate > the manifest as Unreal3.2.8.1.tar.gz changed upstream (but it's a very > insignificant change) :-/ Uhm, actually, those changes were not intended by upstream and open up a backdoor, so PLEASE DON'T UPDATE THE MANIFEST!
(In reply to comment #8) So to sum it up, what SHOULD I do? :) (I got the mail from Syzop saying about backdoored Unreal3.2.8.1.tar.gz Backdoored version (BAD) is: 752e46f2d873c1679fa99de3f52a274d Official version (GOOD) is: 7b741e94e867c0a7370553fd01506c66 )
(In reply to comment #9) > (In reply to comment #8) > > So to sum it up, what SHOULD I do? :) Yeah, sorry for the confusion I made. I was using a local overlay which had a Manifest file with the correct checksums but official portage mirrors and Manifest had the backdoored version. See bug 323691 . If you're still running unrealircd using the Gentoo package, you should immediately upgrade to =unrealircd-3.2.8.1-r1 and restart the server. And otherwise, this bug's comments needn't be further filled with offtopic chat about the backdoor (and I'm the one who went off topic, I admit ;-) ). > > (I got the mail from Syzop saying about backdoored Unreal3.2.8.1.tar.gz > > Backdoored version (BAD) is: 752e46f2d873c1679fa99de3f52a274d > Official version (GOOD) is: 7b741e94e867c0a7370553fd01506c66 > > ) >
No worries, due to this bug I didn't have the backdoored version... :) However, the compile issue is still there on -r1... checking if your system prepends an underscore on symbols... no checking if FD_SETSIZE is large enough to allow 1024 file descriptors... yes ./configure: line 13544: syntax error near unexpected token `0.17' ./configure: line 13544: `PKG_PROG_PKG_CONFIG(0.17)' !!! Please attach the following file when seeking support: !!! /var/tmp/portage/net-irc/unrealircd-3.2.8.1-r1/work/Unreal3.2/config.log * ERROR: net-irc/unrealircd-3.2.8.1-r1 failed: * econf failed * * Call stack: * ebuild.sh, line 54: Called src_configure
(In reply to comment #11) > No worries, due to this bug I didn't have the backdoored version... :) > > However, the compile issue is still there on -r1... Ah. It ended up that -r1 was just a security bump without any other bug fixes. Try installing dev-util/pkgconfig before installing unrealircd. That works around this bug for me, at least.
(In reply to comment #12) UPgrading pkgconfig (I had 0.15, now it's 0.23) indeed solved the issue (I've merged Unreal successfully, at last...). Which suggests the dependency tree for the package is still broken, no? (needs to not only require pkgconfig, but also from a certain version and above...)
(In reply to comment #13) > UPgrading pkgconfig (I had 0.15, now it's 0.23) indeed solved the issue (I've > merged Unreal successfully, at last...). Cool :-). > Which suggests the dependency tree for the package is still broken, no? My patch isn't in portage, so the deps are still broken. ;-) > (needs > to not only require pkgconfig, but also from a certain version and above...) No. The oldest version of pkgconfig in the tree is 0.22. If there was even an unversioned dep in unrealircd-3.2.8.1.ebuild (as in my patch), emerge would have automatically updated your pkgconfig install. Requiring versioned deps for things like this would make ebuilds a lot less readable (and more messy), so I think it's better to avoid them when possible :-).
Fixed in http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-irc/unrealircd/unrealircd-3.2.8.1-r1.ebuild?r1=1.4&r2=1.5
