Bug 616180 – sys-auth/polkit-0.113 - Failed to set XATTR_PAX markings -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest.

• Status: CONFIRMED
• Product: Gentoo Linux

[Description Coacher 2017-04-21 07:25:44 UTC]

Created attachment 470536 [details]
emerge --info polkit

Hello.

After polkit is built the following message is displayed:

 * Messages for package sys-auth/polkit-0.113:

 * Failed to set XATTR_PAX markings -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest.

This can't be good.

Please fix.

[Comment 1 Michał Górny 2017-04-21 07:57:58 UTC]

I think this is only relevant to Hardened.

[Comment 2 Jason Zaman 2017-04-21 08:19:43 UTC]

do you have PAX_MARKINGS set in your make.conf?
is your /var/tmp/portage/ on a tmpfs?

and what happens if you try to manually do:
paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest

[Comment 3 Coacher 2017-05-07 22:01:58 UTC]

(In reply to Jason Zaman from comment #2)
> do you have PAX_MARKINGS set in your make.conf?
No.
> is your /var/tmp/portage/ on a tmpfs?
No.
> and what happens if you try to manually do:
> paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest
~ # cd /var/tmp/portage/sys-auth/polkit-0.113/work/polkit-0.113/
polkit-0.113 # paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest-su: paxctl-ng: command not found

[Comment 4 Coacher 2017-05-07 22:03:00 UTC]

Created attachment 471906 [details]
build.log

[Comment 5 Coacher 2017-05-07 22:05:15 UTC]

(In reply to Coacher from comment #3)
> (In reply to Jason Zaman from comment #2)
> > do you have PAX_MARKINGS set in your make.conf?
> No.
> > is your /var/tmp/portage/ on a tmpfs?
> No.
> > and what happens if you try to manually do:
> > paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest
> ~ # cd /var/tmp/portage/sys-auth/polkit-0.113/work/polkit-0.113/
> polkit-0.113 # paxctl-ng -mre
> test/polkitbackend/.libs/polkitbackendjsauthoritytest-su: paxctl-ng: command
> not found
Adding to this:
# ls test/polkitbackend/.libs/polkitbackendjsauthoritytest
ls: cannot access 'test/polkitbackend/.libs/polkitbackendjsauthoritytest': No such file or directory

I guess tests are not built without test USE.

[Comment 6 Gilles Dartiguelongue (RETIRED) 2017-09-30 09:21:25 UTC]

Indeed, tests are built according to test USE flag, however even if it is not built, PAX marking  does not fail on my system because it looks like paxctl-ng does not fail when given multiple files, some of which does not exist.

So it looks like you could fix it by just upgrading your paxctl installation but there might be something for hardened to look into with paxctl-ng behavior.

[Comment 7 groepaz 2017-12-04 13:00:55 UTC]

i saw this message in my log after world update after recent profile switch... i'm not using hardened either (basically what comment3 says...). that message is kindof irritating, it should at least be a bit more verbose IMHO