Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 117415 - gpgme-1.0.2 'unsafe permission' BUILD error on hardened Gentoo
Summary: gpgme-1.0.2 'unsafe permission' BUILD error on hardened Gentoo
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High blocker
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-01-01 20:29 UTC by Steve Egbert
Modified: 2006-01-02 00:19 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge log file for gpgme package (2805-gpgme-1.0.2.log,43.49 KB, text/plain)
2006-01-01 20:41 UTC, Steve Egbert
Details
Rebooted into non-SELinux but still hardened Linux kernel. (2806-gpgme-1.0.2.log,42.97 KB, text/plain)
2006-01-02 00:04 UTC, Steve Egbert
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Steve Egbert 2006-01-01 20:29:15 UTC
if i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../gpgme    -Os -pipe -fomit-frame-pointer -mtune=pentium3 -I../assuan/ -MT t-genkey.o -MD -MP -MF ".deps/t-genkey.Tpo" -c -o t-genkey.o t-genkey.c; \
then mv -f ".deps/t-genkey.Tpo" ".deps/t-genkey.Po"; else rm -f ".deps/t-genkey.Tpo"; exit 1; fi
srcdir=. ./mkdemodirs
Creating: Alphagpg: WARNING: unsafe permissions on homedir `.'
gpg: exporting secret keys not allowed
gpg: WARNING: nothing exported
make[3]: *** [Alpha/Secret.gpg] Error 2
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/var/tmp/portage/gpgme-1.0.2/work/gpgme-1.0.2/tests/gpg'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/var/tmp/portage/gpgme-1.0.2/work/gpgme-1.0.2/tests'make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/var/tmp/portage/gpgme-1.0.2/work/gpgme-1.0.2'
make: *** [all] Error 2

!!! ERROR: app-crypt/gpgme-1.0.2 failed.
!!! Function src_compile, Line 70, Exitcode 2
!!! (no error message)
!!! If you need support, post the topmost build error, NOT this status message.
Comment 1 Steve Egbert 2006-01-01 20:35:17 UTC
roadie tmp # emerge --info
Portage 2.0.53 (default-linux/x86/2005.1, gcc-3.4.4, glibc-2.3.5-r2, 2.6.11-hardened-r15m i686)
=================================================================
System uname: 2.6.11-hardened-r15m i686 Pentium III (Coppermine)
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.20
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-Os -pipe -fomit-frame-pointer -mtune=pentium3"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-Os -pipe -fomit-frame-pointer -mtune=pentium3"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.cs.lewisu.edu/gentoo/ http://gentoo.mirrored.ca/ ftp://gentoo.llarian.net/pub/gentoo http://206.75.218.53/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X aac acl aim alsa apache2 apm arts audiofile avi bash-completion berkdb bitmap-fonts bzip2 cdr crypt cups curl dga dri eds emboss encode ethereal examples expat fam fbcon ffmpeg flac foomaticdb fortran ftp gdbm geoip gif gphoto2 gpm gstreamer gtk gtk2 hal idn ieee1394 imap imlib ipv6 java javascript jikes jpeg kde kerberos lcms ldap libg++ libwww mad mikmod mmx mng motif mp3 mpeg ncurses nls ogg oggvorbis opengl oss pam pcmcia pcre pda pdflib perl php pie png posix python qt quicktime readline samba sasl scanner sdl skey sockets spell sse ssl ssp svga sysvipc tcltk tcpd tiff truetype truetype-fonts type1-fonts udev usb v4l vcd vorbis wifi win32codecs wmf xml2 xmms xpm xv xvid zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY
Comment 2 Steve Egbert 2006-01-01 20:41:03 UTC
Created attachment 75971 [details]
emerge log file for gpgme package
Comment 3 Steve Egbert 2006-01-01 20:46:16 UTC
Identical failure for gpgme-1.0.3 as well.
Comment 4 Steve Egbert 2006-01-01 20:49:07 UTC
Identical failure in gpgme-1.1.0 as well.
Comment 5 Steve Egbert 2006-01-01 20:55:22 UTC
I think this is critical because 'kde-meta' can no longer build.

The impacted packages are listed in order:

kde-base/libkdenetwork
app-crypt/gpgme
kde-base/certmanager
kde-base/libkpimidentities
kde-base/kontact
kde-base/akregator
kde-base/kdepim-meta
kde-base/kde-meta
Comment 6 Steve Egbert 2006-01-01 23:23:30 UTC
Related to Bug 106711?

http://bugs.gentoo.org/show_bug.cgi?id=106711
Comment 7 Steve Egbert 2006-01-01 23:31:42 UTC
Downgrading to normal.

As I read the other bug 106711 report, I forgot to mention that this platform was selinux-hardened-sources-2.6.

I changed the profile link from selinux-hardened to gentoo-sources and rebuild everything thing, but haven't yet reboot into the new non-selinux, yet.

Comment 8 Steve Egbert 2006-01-02 00:03:58 UTC
Rebooted into non-SELinux, but hardened Linux, still.   Same result...Tried it on another older hardened Linux... Same result.

Other Gentoo profiles works fine.

For those with Gentoo hardened-sources profile, we're totally blocked.

Attaching new 'emerge gpgme' log file attachment
Comment 9 Steve Egbert 2006-01-02 00:04:43 UTC
Created attachment 75979 [details]
Rebooted into non-SELinux but still hardened Linux kernel.
Comment 10 Steve Egbert 2006-01-02 00:06:59 UTC
portage # gpg --version
gpg (GnuPG) 1.4.2
Copyright (C) 2005 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512
Compression: Uncompressed, ZIP, ZLIB, BZIP2
Comment 11 Steve Egbert 2006-01-02 00:19:12 UTC
Found the problem, or should I say, NON-problem.

GNUGP was compiled with USE="selinux"...as indicated below:

[ebuild   R   ] app-crypt/gnupg-1.4.2-r3  +X +bzip2 -caps +curl -ecc -idea +ldap +nls +readline (-selinux)* -smartcard -static +usb +zlib 0 kB


Am doing 'emerge -e world'  (again).