Bug 257472 – app-emulation/virtualbox-bin-2.0.6 - TEXTREL opt/VirtualBox/VBoxVMM.so

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Francesco Lamonica 2009-02-03 10:08:18 UTC]

here's the relevant part...

* QA Notice: The following files contain runtime text relocations
 *  Text relocations force the dynamic linker to perform extra
 *  work at startup, waste system resources, and may pose a security
 *  risk.  On some architectures, the code may not even function
 *  properly, if at all.
 *  For more information, see http://hardened.gentoo.org/pic-fix-guide.xml
 *  Please include the following list of files in your report:
 * TEXTREL opt/VirtualBox/VBoxVMM.so

scanelf: rpath_security_checks(): Security problem with DT_RPATH='$ORIGIN' in /var/tmp/portage/app-emulation/virtualbox-bin-2.0.6/image/opt/VirtualBox/VBoxSDL with mode set of 4511
scanelf: rpath_security_checks(): Security problem with DT_RPATH='$ORIGIN' in /var/tmp/portage/app-emulation/virtualbox-bin-2.0.6/image/opt/VirtualBox/VirtualBox with mode set of 4511
scanelf: rpath_security_checks(): Security problem with DT_RPATH='$ORIGIN' in /var/tmp/portage/app-emulation/virtualbox-bin-2.0.6/image/opt/VirtualBox/VBoxHeadless with mode set of 4511

here's emerge --info

neverland ~ # emerge --info
Portage 2.1.6.4 (default/linux/amd64/2008.0/desktop, gcc-4.1.2, glibc-2.6.1-r0, 2.6.27-gentoo-r8 x86_64)
=================================================================
System uname: Linux-2.6.27-gentoo-r8-x86_64-AMD_Phenom-tm-_9750_Quad-Core_Processor-with-glibc2.2.5
Timestamp of tree: Tue, 03 Feb 2009 09:30:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7-r1, 2.1.6-r1
dev-lang/python:     2.5.2-r7
dev-util/ccache:     2.4-r7
dev-util/cmake:      2.4.8
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-march=k8 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="candy ccache distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch userprov usersandbox"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LDFLAGS="-Wl,-O1"
LINGUAS="en it"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X acl acpi aften akode alsa amazon amd64 amr amrnb amrwb animgif audiofile berkdb bluetooth branding bzip2 cairo ccache cdr cleartype cli cracklib crypt cscope cups curl cxx dbus dri dvd dvdr dvdread eds encode esd fam ffmpeg firefox foomaticdb gcrypt gd gdbm gif gimp gkrellm gpm gsm gstreamer gtk hardened iconv imagemagick ipod java java6 jpeg kde lame libgcrypt libssh2 logrotate loop-aes mad matroska midi mmx mmxext mng mp3 mp4 mpeg mpeg2 mplayer mudflap multilib musepack musicbrainz ncurses nls nptl nptlonly ogg opengl openmp openssl opensslcrypt pam pcre pdf perl png ppds pppd python qt3 qt3support qt4 quicktime readline reflection samba sdl session smp sndfile speex spell spl sqlite3 sse sse2 sse3 sse4.1 sse4.2 sse4a sse5 ssl startup-notification subversion svg svnserve swat sysfs syslog tcpd theora tiff truetype unicode usb v4l v4l2 vorbis webkit xcomposite xinerama xml xorg xscreensaver xulrunner xv zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en it" USERLAND="GNU" VIDEO_CARDS="vesa nv nvidia vga"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

[Comment 1 Alessio Cassibba (X-Drum) 2009-02-03 11:20:25 UTC]

(In reply to comment #0)
[cut]

Hi, this is a known issue already reported upstream caused by the
so called "virtualbox hardening system".

This problem was fixed in virtualbox-ose 2.1.2

[Comment 2 SpanKY 2009-03-05 07:27:08 UTC]

added an ignore to virtualbox-bin-2.1.4