Bug 579210 – sys-fs/xfsprogs installs files that contain insecure RUNPATH

• Product: Gentoo Linux
• Status: RESOLVED NEEDINFO

[Description Agostino Sarubbo 2016-04-07 07:58:34 UTC]

This is an auto-filled bug because this package installs files that contain insecure RUNPATH.

 * Messages for package sys-fs/xfsprogs-3.2.4:

 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at http://bugs.gentoo.org/
 *  with the maintaining herd of the package.
 *   /var/tmp/portage/sys-fs/xfsprogs-3.2.4/image/usr/sbin/xfs_quota
 *   /var/tmp/portage/sys-fs/xfsprogs-3.2.4/image/usr/sbin/xfs_mdrestore
 *   /var/tmp/portage/sys-fs/xfsprogs-3.2.4/image/usr/sbin/xfs_fsr

Portage 2.2.26 (python 3.4.3-final-0, default/linux/amd64/13.0, gcc-4.9.3, glibc-2.22-r4, 4.4.2-hardened-xxxx-std-ipv6-64 x86_64)
=================================================================
System uname: Linux-4.4.2-hardened-xxxx-std-ipv6-64-x86_64-Intel-R-_Xeon-R-_CPU_E3-1245_V2_@_3.40GHz-with-gentoo-2.2
KiB Mem:    32855068 total,   7787376 free
KiB Swap:          0 total,         0 free
sh bash 4.3_p42-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
app-shells/bash:          4.3_p42-r1::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.10-r1::gentoo, 3.4.3-r1::gentoo
dev-util/cmake:           3.3.1-r1::gentoo                                                                                                                                                                                                                                     
sys-apps/baselayout:      2.2::gentoo                                                                                                                                                                                                                                          
sys-apps/openrc:          0.19.1::gentoo                                                                                                                                                                                                                                       
sys-apps/sandbox:         2.10-r1::gentoo                                                                                                                                                                                                                                      
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo                                                                                                                                                                                                                           
sys-devel/automake:       1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo                                                                                                                                                                                                      
sys-devel/binutils:       2.25.1-r1::gentoo                                                                                                                                                                                                                                    
sys-devel/gcc:            4.9.3::gentoo                                                                                                                                                                                                                                        
sys-devel/gcc-config:     1.7.3::gentoo                                                                                                                                                                                                                                        
sys-devel/libtool:        2.4.6::gentoo                                                                                                                                                                                                                                        
sys-devel/make:           4.1-r1::gentoo                                                                                                                                                                                                                                       
sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)                                                                                                                                                                                                                     
sys-libs/glibc:           2.22-r4::gentoo                                                                                                                                                                                                                                      
Repositories:                                                                                                                                                                                                                                                                  
                                                                                                                                                                                                                                                                               
gentoo                                                                                                                                                                                                                                                                         
    location: /usr/portage                                                                                                                                                                                                                                                     
    sync-type: rsync                                                                                                                                                                                                                                                           
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage                                                                                                                                                                                                                          
    priority: -1000                                                                                                                                                                                                                                                            
                                                                                                                                                                                                                                                                               
ACCEPT_KEYWORDS="amd64"                                                                                                                                                                                                                                                        
ACCEPT_LICENSE="*"                                                                                                                                                                                                                                                             
CBUILD="x86_64-pc-linux-gnu"                                                                                                                                                                                                                                                   
CFLAGS="-march=native -Wformat -Werror=format-security -g0 -O2"                                                                                                                                                                                                                
CHOST="x86_64-pc-linux-gnu"                                                                                                                                                                                                                                                    
CONFIG_PROTECT="/etc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /var/bind"                                                                                                                                                                           
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d 
/etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"                                                                                                                                                                                      
CXXFLAGS="-march=native -Wformat -Werror=format-security -g0 -O2"                                                                                                                                                                                                              
DISTDIR="/usr/portage/distfiles"                                                                                                                                                                                                                                               
EMERGE_DEFAULT_OPTS="--with-bdeps y --keep-going y -1"                                                                                                                                                                                                                         
FCFLAGS="-O2 -pipe"                                                                                                                                                                                                                                                            
FEATURES="assume-digests binpkg-logs collision-protect config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms sign split-log strict unknown-features-warn unmerge-logs 
unmerge-orphans userfetch userpriv usersandbox usersync xattr"                                                                                                                                                                                                                        
FFLAGS="-O2 -pipe"                                                                                                                                                                                                                                                             
GENTOO_MIRRORS="http://distfiles.gentoo.org"                                                                                                                                                                                                                                   
LANG="it_IT.UTF-8"                                                                                                                                                                                                                                                             
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"                                                                                                                                                                                                                         
MAKEOPTS="-j8"                                                                                                                                                                                                                                                                 
PKGDIR="/root/.pkg"                                                                                                                                                                                                                                                            
PORTAGE_CONFIGROOT="/"                                                                                                                                                                                                                                                         
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="X acl amd64 berkdb bzip2 cairo cli consolekit cracklib crypt cxx dbus dri fortran gdbm gudev hwdb iconv icu ipv6 jpeg minizip mmx mmxext modules multilib ncurses nls nptl ogg opengl openmp pam pax_kernel pcre png policykit python qt3support qt4 qt5 readline 
seccomp session sse sse2 ssl tcpd unicode vorbis xattr zlib" ABI_X86="64" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" KERNEL="linux" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="am fil zh af ca cs da de el es et gl hu nb nl pl pt 
ro ru sk sl sv uk bg cy en eo fo ga he id ku lt lv mk ms nn sw tn zu ja zh_TW en_GB pt_BR ko zh_CN ar en_CA fi kk oc sr tr fa wa nds as be bn bn_BD bn_IN en_US es_AR es_CL es_ES es_MX eu fy fy_NL ga_IE gu gu_IN hi hi_IN is ka kn ml mr nn_NO or pa pa_IN pt_PT rm 
si sq sv_SE ta ta_LK te th vi ast dz km my om sh ug uz ca@valencia sr@ijekavian sr@ijekavianlatin sr@latin csb hne mai se es_LA fr_CA zh_HK br la no es_CR et_EE sr_CS bo hsb hy mn sr@Latn lb ne bs tg uz@cyrillic xh be_BY brx ca_XV dgo en_ZA gd kok ks ky lo mni nr 
ns pap ps rw sa_IN sat sd ss st sw_TZ ti ts ve mt ia az me tl ak hy_AM lg nso son ur_PK it fr nb nb_NO hr nan ur tk cs_CZ da_DK de_1901 de_CH en_AU lt_LT pl_PL sa sk_SK th_TH ta_IN tt sco ha mi ven ar_SY el_GR ro_RO ru_RU sl_SI uk_UA vi_VN ar_SY te_IN de_DE es_VE 
fa_IR fr_FR hu_HU id_ID it_IT ja_JP ka_GE nl_NL sr_BA sr_RS ca_ES fi_FI he_IL jv ru_gold yi eu_ES byn crh gez haw so tig tt@iqtelif wal wo ca_valencia kmr_Latn sid sr_Latn bg_BG ko_KR" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset empty_gif 
fastcgi geo gzip limit_conn limit_req map memcached proxy referer rewrite scgi split_clients ssi upstream_ip_hash userid uwsgi addition auth_pam cache_purge dav dav_ext degradation echo fancyindex flv geoip gunzip gzip_static headers_more image_filter lua metrics 
mp4 naxsi perl push push_stream random_index realip secure_link security slowfs_cache spdy stub_status sub upload_progress upstream_check xslt auth_request mogilefs sticky" NGINX_MODULES_MAIL="imap pop3 smtp" OFFICE_IMPLEMENTATION="libreoffice" 
PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" QEMU_USER_TARGETS="aarch64 alpha arm armeb cris i386 m68k microblaze microblazeel mips mips64 mips64el mipsel mipsn32 mipsn32el or32 ppc ppc64 ppc64abi32 s390x sh4 sh4eb 
sparc sparc32plus sparc64 unicore32 x86_64 ppc64le tilegx" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU"

[Comment 1 SpanKY 2016-04-07 17:47:09 UTC]

you need to attach build logs to all of your autofiled bugs.  4.5.0 works fine for me.  older don't build.

[Comment 2 Agostino Sarubbo 2016-04-07 18:30:43 UTC]

Created attachment 429866 [details]
xfsprogs-3.2.4:20160407-182803.log

build log

[Comment 3 Agostino Sarubbo 2016-04-07 18:31:02 UTC]

(In reply to SpanKY from comment #1)
> you need to attach build logs to all of your autofiled bugs.  4.5.0 works
> fine for me.  older don't build.

Is attached when there is a compilation failure.

I'm talking of 3.2.4 since it is the latest stable.