Bug 350138 – sys-libs/pam-1.1.3 insecure RUNPATHs

• Status: RESOLVED INVALID
• Product: Gentoo Linux

[Description Dan Wallis 2010-12-30 09:51:29 UTC]

* QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at http://bugs.gentoo.org/
 *  with the maintaining herd of the package.
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/libpam_misc.so.0.82.0
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_time.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_warn.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_securetty.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_rhosts.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_cracklib.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_mail.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_permit.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_exec.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_filter.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_env.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_stress.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_umask.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_localuser.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_wheel.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_nologin.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_timestamp.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_ftp.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_limits.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_tally2.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_deny.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_filter/upperLOWER
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_group.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_lastlog.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_echo.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_access.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_namespace.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_issue.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_tally.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_xauth.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_mkhomedir.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_debug.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_loginuid.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_pwhistory.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_shells.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_unix.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_keyinit.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_motd.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_listfile.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_succeed_if.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_faildelay.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_rootok.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_userdb.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/pam_timestamp_check
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/pam_tally2
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/mkhomedir_helper

 * ERROR: sys-libs/pam-1.1.3 failed:
 *   Aborting due to serious QA concerns with RUNPATH/RPATH

[Comment 1 Diego Elio Pettenò (RETIRED) 2010-12-30 09:58:59 UTC]

Please provide emerge --info and full build log because I cannot reproduce this issue.

[Comment 2 Martin Walch 2010-12-30 17:51:01 UTC]

First, I could not reproduce this, but now it happens every time I emerge pam. I have no clue where this comes from.

[Comment 3 Martin Walch 2010-12-30 17:51:27 UTC]

Created attachment 258450 [details]
emerge --info -v pam

[Comment 4 Martin Walch 2010-12-30 17:51:54 UTC]

Created attachment 258452 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log

[Comment 5 Martin Walch 2010-12-30 17:52:24 UTC]

Created attachment 258454 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/environment

[Comment 6 Dan Wallis 2010-12-30 18:01:49 UTC]

I'll post my emerge --info & build.log when I get back to my machine (probably later today). Reopening for now thanks to Mr Anderson's input.

[Comment 7 Diego Elio Pettenò (RETIRED) 2010-12-30 18:05:10 UTC]

I can now reproduce it on one box but not the other. Okay it's another libtool moon phase bug it seems.

[Comment 8 Jeroen Roovers (RETIRED) 2010-12-30 18:57:40 UTC]

Assign it then?

[Comment 9 Dan Wallis 2010-12-31 06:40:17 UTC]

Created attachment 258481 [details]
emerge --info -v =sys-libs/pam-1.1.3

[Comment 10 Dan Wallis 2010-12-31 06:41:32 UTC]

Created attachment 258483 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log

[Comment 11 Dan Wallis 2010-12-31 06:41:55 UTC]

Created attachment 258485 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/environment