Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 120389 - Insecure binaries when merging custom ebuild
Summary: Insecure binaries when merging custom ebuild
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: x86 Linux
: High normal
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
: 120390 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-01-26 02:01 UTC by Niall Moran
Modified: 2006-01-26 09:24 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Niall Moran 2006-01-26 02:01:41 UTC
Trying to emerge ebuild for globus-data-management-client as follows 

emerge info is as follows

Portage 2.0.54 (default-linux/x86/2005.1, gcc-3.3.6, glibc-2.3.5-r2, 2.6.14-gentoo-r5 i686)
=================================================================
System uname: 2.6.14-gentoo-r5 i686 AMD Opteron(tm) Processor 250
Gentoo Base System version 1.6.14
dev-lang/python:     2.3.5, 2.4.2
sys-apps/sandbox:    1.2.11
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=athlon-xp -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 3dnow apm arts avi berkdb bitmap-fonts bzip2 crypt cups eds emboss encode expat foomaticdb fortran gdbm gif gpm gstreamer gtk2 imlib ipv6 jpeg libg++ libwww mad mikmod mmx motif mp3 mpeg ncurses nls ogg oggvorbis opengl oss pam pdflib perl png python qt quicktime readline sdl spell sse ssl tcpd truetype truetype-fonts type1-fonts udev vorbis xml2 xmms xv zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS

Log file and ebuild are attached.
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2006-01-26 02:09:17 UTC
*** Bug 120390 has been marked as a duplicate of this bug. ***
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2006-01-26 02:10:44 UTC
Your custom ebuild, your custom problem. Fix it. 
Comment 3 Niall Moran 2006-01-26 02:28:17 UTC
(In reply to comment #2)
> Your custom ebuild, your custom problem. Fix it. 
> 

Ok I understand that it is a custom ebuild and that it cannot be expected that the gentoo developers be responsible for it. How and ever the amount of documentation regarding this error is practically non existent. The only paragraph of information I have found on this error message is 

"Todo from vapier: TEXTREL's ... binary files which contain text relocations ... see 'prepstrip' for a full description unsafe files ... basically files that are setid and writable by Other users i've added the following QA checks to portage HEAD (no idea when they'll hit a release): Insecure RUNPATHs ... binary files which have RUNPATH's encoded in them which are in +t directories Executable stacks ... binary files whose stack is marked with +x ... will bomb on amd64 for example"

Which does not explain much. Any help or advice would be greatly appreciated.
Comment 4 Jakub Moc (RETIRED) gentoo-dev 2006-01-26 02:32:32 UTC
Bugzilla is NOT a support forum, kindly use forums.gentoo.org, mailing lists or  freenode IRC channel (#gentoo-hardened in this case) for such questions.

Closing.
Comment 5 SpanKY gentoo-dev 2006-01-26 06:14:35 UTC
in other words, start a thread on gentoo-dev mailing list rather than filing a bug in bugzilla
Comment 6 Niall Moran 2006-01-26 09:24:06 UTC
(In reply to comment #5)
> in other words, start a thread on gentoo-dev mailing list rather than filing a
> bug in bugzilla
> 

Thanks for the advice. Ill take a look at the forums. Cheers!