Bug 350138

Summary:	sys-libs/pam-1.1.3 insecure RUNPATHs
Product:	Gentoo Linux	Reporter:	Dan Wallis <mrdanwallis>
Component:	[OLD] Core system	Assignee:	PAM Gentoo Team (OBSOLETE) <pam-bugs+disabled>
Status:	RESOLVED INVALID
Severity:	normal	CC:	walch.martin
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	emerge --info -v pam /var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log /var/tmp/portage/sys-libs/pam-1.1.3/temp/environment emerge --info -v =sys-libs/pam-1.1.3 /var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log /var/tmp/portage/sys-libs/pam-1.1.3/temp/environment

Description Dan Wallis 2010-12-30 09:51:29 UTC

* QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at http://bugs.gentoo.org/
 *  with the maintaining herd of the package.
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/libpam_misc.so.0.82.0
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_time.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_warn.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_securetty.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_rhosts.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_cracklib.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_mail.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_permit.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_exec.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_filter.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_env.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_stress.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_umask.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_localuser.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_wheel.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_nologin.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_timestamp.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_ftp.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_limits.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_tally2.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_deny.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_filter/upperLOWER
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_group.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_lastlog.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_echo.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_access.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_namespace.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_issue.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_tally.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_xauth.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_mkhomedir.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_debug.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_loginuid.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_pwhistory.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_shells.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_unix.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_keyinit.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_motd.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_listfile.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_succeed_if.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_faildelay.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_rootok.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs lib/security/pam_userdb.so
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/pam_timestamp_check
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/pam_tally2
 * /var/tmp/portage/sys-libs/pam-1.1.3/work/Linux-PAM-1.1.3/libpam/.libs sbin/mkhomedir_helper

 * ERROR: sys-libs/pam-1.1.3 failed:
 *   Aborting due to serious QA concerns with RUNPATH/RPATH

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2010-12-30 09:58:59 UTC

Please provide emerge --info and full build log because I cannot reproduce this issue.

Comment 2 Martin Walch 2010-12-30 17:51:01 UTC

First, I could not reproduce this, but now it happens every time I emerge pam. I have no clue where this comes from.

Comment 3 Martin Walch 2010-12-30 17:51:27 UTC

Created attachment 258450 [details]
emerge --info -v pam

Comment 4 Martin Walch 2010-12-30 17:51:54 UTC

Created attachment 258452 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log

Comment 5 Martin Walch 2010-12-30 17:52:24 UTC

Created attachment 258454 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/environment

Comment 6 Dan Wallis 2010-12-30 18:01:49 UTC

I'll post my emerge --info & build.log when I get back to my machine (probably later today). Reopening for now thanks to Mr Anderson's input.

Comment 7 Diego Elio Pettenò (RETIRED) gentoo-dev

2010-12-30 18:05:10 UTC

I can now reproduce it on one box but not the other. Okay it's another libtool moon phase bug it seems.

Comment 8 Jeroen Roovers (RETIRED) gentoo-dev

2010-12-30 18:57:40 UTC

Assign it then?

Comment 9 Dan Wallis 2010-12-31 06:40:17 UTC

Created attachment 258481 [details]
emerge --info -v =sys-libs/pam-1.1.3

Comment 10 Dan Wallis 2010-12-31 06:41:32 UTC

Created attachment 258483 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/build.log

Comment 11 Dan Wallis 2010-12-31 06:41:55 UTC

Created attachment 258485 [details]
/var/tmp/portage/sys-libs/pam-1.1.3/temp/environment