Bugzilla Bug 47057

When running chkrootkit (emerged with -pie in LDFLAGS), bash emits a
'/usr/sbin/strings-static: No such file or directory' message even though it
actually exists. This problem is temporarily solved by re-emerging chkrootkit
w/o -pie in LDFLAGS.

Reproducible: Always
Steps to Reproduce:
1. Add -pie to LDFLAGS var in make.conf
2. emerge chkrootkit
3. run chkrootkit

Actual Results:  
Checking `amd'... not found
Checking `basename'... /usr/sbin/chkrootkit: line 1504:
/usr/sbin/strings-static: No such file or directory
not infected

Expected Results:  
Checking `amd'... not found
Checking `basename'... not infected

Portage 2.0.50-r3 (hardened-x86-2004.0, gcc-3.3.3, glibc-2.3.3_pre20040207-r0,
2.6.4-hardened-r3)
=================================================================
System uname: 2.6.4-hardened-r3 i686 Celeron (Mendocino)
Gentoo Base System version 1.4.3.13p1
distcc 2.13 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[disabled]
ccache version 2.3 [enabled]
Autoconf: sys-devel/autoconf-2.59-r3
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=pentium2 -fomit-frame-pointer -fstack-protector -fPIC
-fforce-addr -pipe"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium2 -fomit-frame-pointer -fstack-protector -fPIC
-fforce-addr -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache sandbox sfperms strict"
GENTOO_MIRRORS="http://192.168.1.3/gentoo/
        ftp://mirror.iawnet.sandia.gov/pub/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://192.168.1.3/gentoo-portage/"
USE="acl apache2 berkdb crypt fastcgi gdbm hardened imap maildir mmx ncurses
nptl pam perl png prelude python readline sasl ssl tcpd x86 zlib"

Updated in portage chkrootkit-0.42b

Could you please tell me if '/usr/sbin/strings-static' 
has an invalid interp section set? 

user@localhost $ readelf -e /usr/sbin/strings-static | grep interpreter
# Please paste the results here.

What I'm guessing is going on here is when the -static/-pie flags are
used together we are ending up with the ibcs interp.

Also note.. chkrootkit-0.43 is in portage but it's -* masked. No changes 
were made to that ebuild.

http://bugs.gentoo.org/show_bug.cgi?id=41040

solar,

hardcore root # readelf -e /usr/sbin/strings-static | grep interpreter
      [Requesting program interpreter: /usr/lib/libc.so.1]

Thanks thats exactly what I thought it would be..
I'm going to make another guess that /usr/lib/libc.so.1 does not exist either.
Sigh.. Freaky longterm toolchain love needed...

Anyway this should be fixed now for chkrootkit. Closing bug as FIXED.