Summary: | >=media-libs/mesa-9.0.1: files swrast_dri.so and i915_dri.so contains insecure RUNPATHs (ebuild bug) | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | David J Cozatt <djcozatt> |
Component: | Current packages | Assignee: | Gentoo X packagers <x11> |
Status: | RESOLVED FIXED | ||
Severity: | QA | CC: | Al4n2it1ak, dannestrat.bugzilla, floppym, ghutzl, hasufell, Hugo.Mildenberger, kripton, maggu2810, mmk, mplichta, qa, quantheory, vortexius |
Priority: | Normal | Keywords: | InOverlay |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: |
build log
fix ebuild for autotools minor fix of the previous diff ebuild patch updated for multilib eclass ebuild patch updated for multilib eclass (corrected version) |
Description
David J Cozatt
2012-07-28 18:28:00 UTC
i915 too in latest snapshot: /var/tmp/portage/media-libs/mesa-8.1_rc1_pre20120814/image/usr/lib64/mesa/i915_dri.so The same for media-libs/mesa-9.0: QA Notice: The following files contain insecure RUNPATHs /var/tmp/portage/media-libs/mesa-9.0/image/usr/lib64/mesa/swrast_dri.so Still the same QA Notice for media-libs/mesa-9.0.1 : * QA Notice: The following files contain insecure RUNPATHs * Please file a bug about this at http://bugs.gentoo.org/ * with the maintaining herd of the package. * /var/tmp/portage/media-libs/mesa-9.0.1/image/usr/lib64/mesa/swrast_dri.so * Same for me: >Auto fixing rpaths for /var/tmp/portage/media-libs/mesa-9.0.1/image/usr/lib64/mesa/swrast_dri.so > > * QA Notice: The following files contain insecure RUNPATHs > * Please file a bug about this at http://bugs.gentoo.org/ > * with the maintaining herd of the package. > * /var/tmp/portage/media-libs/mesa-9.0.1/image/usr/lib64/mesa/swrast_dri.so *** Bug 454756 has been marked as a duplicate of this bug. *** Created attachment 337458 [details, diff]
fix ebuild for autotools
OK, this problem is tricky and - to a point - the fault of the ebuild.
It's the fallout of mesa being migrated to autotools.
It can happen only if both gallium *and* classic drivers are built.
Attached ebuild diff is a possible way to fix this - it *seems* to work.
Created attachment 337484 [details, diff]
minor fix of the previous diff
Minor corrections of the earlier block: as 'make install' restores some of la files, remove then again; also, to keep things consistent, it needs to be "${ED}", not "${D}".
Still present in media-libs/mesa-9.1.2-r1 Still present on mesa-9.2.0: * QA Notice: The following files contain insecure RUNPATHs * Please file a bug about this at http://bugs.gentoo.org/ * with the maintaining herd of the package. * /var/tmp/portage/media-libs/mesa-9.2.0/image/usr/lib64/mesa/swrast_dri.so * Created attachment 362448 [details, diff]
ebuild patch updated for multilib eclass
As of mesa-9.2.1 patch can be simplified, as removing libtool files happens at multilib_src_install_all.
Created attachment 362450 [details, diff]
ebuild patch updated for multilib eclass (corrected version)
oops, attached not quite correct file (the changes are the same, but the previous would not apply).
*** Bug 490282 has been marked as a duplicate of this bug. *** Comment on attachment 362450 [details, diff]
ebuild patch updated for multilib eclass (corrected version)
I'm pretty sure you should be passing DESTDIR="${D}" rather than DESTDIR="${ED}"; ${EPREFIX} should already be included in the Makefile via configure.
Other than the problem I mentioned, the patch looks ok to me and seems to resolve the problem on my system. I also verified that the set of installed files is the same. (In reply to Mike Gilbert from comment #13) > Comment on attachment 362450 [details, diff] [details, diff] > ebuild patch updated for multilib eclass (corrected version) > > I'm pretty sure you should be passing DESTDIR="${D}" rather than > DESTDIR="${ED}"; ${EPREFIX} should already be included in the Makefile via > configure. Don't have a prefix system, so never really interested in the specifics, therefore can't really tell one way or the other. Same with 9.1.6 QA Notice: The following files contain insecure RUNPATHs Please file a bug about this at http://bugs.gentoo.org/ with the maintaining herd of the package. /var/tmp/portage/media-libs/mesa-9.1.6/image/usr/lib64/mesa/swrast_dri.so Portage 2.2.7 (default/linux/amd64/13.0/desktop, gcc-4.7.3, glibc-2.16.0, 3.11.10-geek x86_64) ================================================================= System uname: Linux-3.11.10-geek-x86_64-AMD_E-450_APU_with_Radeon-tm-_HD_Graphics-with-gentoo-2.2 KiB Mem: 7762076 total, 5933932 free KiB Swap: 10485756 total, 10485756 free Timestamp of tree: Fri, 03 Jan 2014 09:15:01 +0000 ld GNU ld (GNU Binutils) 2.23.2 ccache version 3.1.9 [enabled] app-shells/bash: 4.2_p45 dev-java/java-config: 2.1.12-r1 dev-lang/python: 2.7.5-r3, 3.3.2-r2 dev-util/ccache: 3.1.9 dev-util/cmake: 2.8.11.2 dev-util/pkgconfig: 0.28 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.12.4 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.11.6, 1.12.6, 1.13.4 sys-devel/binutils: 2.23.2 sys-devel/gcc: 4.7.3-r1 sys-devel/gcc-config: 1.7.3 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r4 sys-kernel/linux-headers: 3.9 (virtual/os-headers) sys-libs/glibc: 2.16.0 Repositories: sunrise init6 sublime-text gentoo-guis mv gentoo mipl ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -fomit-frame-pointer -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -fomit-frame-pointer -pipe" DISTDIR="/var/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://gentoo.mneisen.org/ http://gentoo.mirror.pw.edu.pl/ ftp://ftp.vectranet.pl/gentoo/" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/sunrise /var/lib/layman/init6 /var/lib/layman/sublime-text /var/lib/layman/gentoo-guis /var/lib/layman/mv /usr/portage /usr/local/portage/gentoo.mipl" SYNC="rsync://rsync6.pl.gentoo.org/gentoo-portage" USE="7zip X a52 aac acl acpi alsa amd64 avahi bash-completion berkdb bluetooth branding bzip2 cairo cdda cddb cdr cli consolekit cracklib crypt cups cxx dbus directfb dri dts dvd dvdr emboss encode exif fam fbcon ffmpeg firefox flac fontconfig fortran gdbm gif gnome-keyring gpm gstreamer gtk gtk2 iconv icu ipv6 jpeg jpeg2k lame lcms ldap libnotify libv4l libv4l2 lm_sensors mad matroska mmx mmxext mng modules mp3 mp4 mpeg mudflap multilib ncurses network-cron nls nptl ntfs ogg opengl openmp orc pam pango pcre pdf png policykit ppds quicktime raw readline samba sdl session smp spell sse sse2 sse3 sse4a ssl ssse3 startup-notification svg tcpd threads thunar tiff truetype udev udisks unicode upnp upower usb v4l vim-syntax vorbis wifi wma wmf wxwidgets x264 xcb xcomposite xinerama xml xpm xv xvid zeroconf zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="synaptics evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en pl en_US pl_PL" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" QEMU_SOFTMMU_TARGETS="x86_64 i386" QEMU_USER_TARGETS="x86_64 i386" RUBY_TARGETS="ruby19 ruby18" USERLAND="GNU" VIDEO_CARDS="radeon" XFCE_PLUGINS="brightness menu trash logout" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" USE_PYTHON="2.7 3.3" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS I've pushed Rafał's patch, with floppym's suggested change to the x11-overlay. mesa-10.1.0 is now in the tree with this fix. |