Bug 709598 – sci-libs/parmetis-4.0.3_p20230326-r1 - QA Notice: The following files contain insecure RUNPATHs: .../usr/lib64/libparmetis.so

• Product: Gentoo Linux
• Status: UNCONFIRMED ---

[Description CaptainBlood 2020-02-14 11:34:55 UTC]

Install sci-libs/parmetis-4.0.3-r1 into /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/
>>> Working in BUILD_DIR: "/var/tmp/portage/sci-libs/parmetis-4.0.3-r1/work/parmetis-4.0.3_build"
make -j3 -l3 install 
[ 60%] Built target metis
[100%] Built target parmetis
Install the project...
-- Install configuration: "Gentoo"
-- Installing: /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/lib64/libmetis.so
-- Installing: /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/include/parmetis.h
-- Installing: /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/lib64/libparmetis.so
-- Set runtime path of "/var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image//usr/lib64/libparmetis.so" to ""
>>> Completed installing sci-libs/parmetis-4.0.3-r1 into /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/

 * Final size of build directory: 28748 KiB (28.0 MiB)
 * Final size of installed tree:    840 KiB

scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/lib64/libparmetis.so
Auto fixing rpaths for /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/lib64/libparmetis.so

 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at https://bugs.gentoo.org/
 *  with the maintainer of the package.
 *   /var/tmp/portage/sci-libs/parmetis-4.0.3-r1/image/usr/lib64/libparmetis.so
 *     RPATH: :/usr/lib64
----------------------------------------------------------------------------
emerge --info sci-libs/parmetis
Portage 2.3.84 (python 3.6.9-final-0, default/linux/amd64/17.1, gcc-9.2.0, glibc-2.29-r7, 4.19.97-gentoo-classic x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-4.19.97-gentoo-classic-x86_64-Intel-R-_Core-TM-_i3-6100_CPU_@_3.70GHz-with-gentoo-2.6
KiB Mem:     3941140 total,   1349604 free
KiB Swap:    8048528 total,   8035204 free

Timestamp of repository gentoo: Fri, 14 Feb 2020 08:45:01 +0000
Head commit of repository gentoo: e897bd1a204f47d3491779a0be409c0c79fa0b30


sh bash 4.4_p23-r1
ld GNU ld (Gentoo 2.32 p2) 2.32.0
distcc 3.3.3 x86_64-pc-linux-gnu [disabled]
app-shells/bash:          4.4_p23-r1::gentoo
dev-java/java-config:     2.2.0-r4::gentoo
dev-lang/perl:            5.30.1::gentoo
dev-lang/python:          2.7.17::gentoo, 3.6.9::gentoo, 3.7.5-r1::gentoo
dev-util/cmake:           3.14.6::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.6-r1::gentoo
sys-apps/openrc:          0.42.1::gentoo
sys-apps/sandbox:         2.13::gentoo
sys-devel/autoconf:       2.13-r1::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.16.1-r1::gentoo
sys-devel/binutils:       2.32-r1::gentoo
sys-devel/gcc:            9.2.0-r3::gentoo
sys-devel/gcc-config:     2.2::gentoo
sys-devel/libtool:        2.4.6-r6::gentoo
sys-devel/make:           4.2.1-r4::gentoo
sys-kernel/linux-headers: 4.19::gentoo (virtual/os-headers)
sys-libs/glibc:           2.29-r7::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.europe.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-extra-opts: 
    sync-rsync-verify-metamanifest: no
    sync-rsync-verify-jobs: 1
    sync-rsync-verify-max-age: 24

local-repo
    location: /var/db/repos/local-repo
    masters: gentoo

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=skylake -mtune=skylake  -O2             -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.3/ext-active/ /etc/php/cgi-php7.3/ext-active/ /etc/php/cli-php7.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=skylake -mtune=skylake  -O2             -pipe    "
DISTDIR="/var/cache/distfiles"
EMERGE_DEFAULT_OPTS="--alert y 			--alphabetical 			--ask-enter-invalid 			--autounmask y  			--autounmask-only n  			--autounmask-unrestricted-atoms y  			--autounmask-write y 			--misspell-suggestions n 			--noconfmem 			--nospinner   		--tree 			--with-bdeps y"
ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-march=skylake -mtune=skylake  -O2             -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned sandbox sfperms split-elog strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-march=skylake -mtune=skylake  -O2             -pipe"
GENTOO_MIRRORS="http://ftp.free.fr/mirrors/ftp.gentoo.org/ https://mirrors.evowise.com/gentoo/ http://mirror.dkm.cz/gentoo/ http://mirror.eu.oneandone.net/linux/distributions/gentoo/gentoo/ http://mirror.netcologne.de/gentoo/ http://mirror.leaseweb.com/gentoo/ http://mirror.bytemark.co.uk/gentoo/ http://gentoo.mirror.web4u.cz/ http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/"
LANG="fr_FR.utf8"
LDFLAGS="  -Wl,-O1       -Wl,-fuse-ld=bfd  -Wl,--enable-new-dtags  -march=skylake -mtune=skylake  -O2             -pipe "
LINGUAS="fr"
MAKEOPTS="-j3 -l3"
PKGDIR="/var/cache/binpkgs"
PORTAGE_COMPRESS="lzma"
PORTAGE_COMPRESS_FLAGS="-9"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="amd64 asm minimal split-usr" ABI_X86="64" ALSA_CARDS="hda-intel" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GRUB_PLATFORMS="pc" INPUT_DEVICES="libinput" KERNEL="linux" L10N="fr" PHP_TARGETS="php7-3" PYTHON_SINGLE_TARGET="python3_7" PYTHON_TARGETS="python2_7 python3_6 python3_7" QEMU_USER_TARGETS="aarch64" RUBY_TARGETS="ruby25" USERLAND="GNU" VIDEO_CARDS="intel i965"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_RSYNC_EXTRA_OPTS

=================================================================
                        Package Settings
=================================================================

sci-libs/parmetis-4.0.3-r1::gentoo was built with the following:
USE="-doc double-precision -examples int64 mpi openmp -pcre -static-libs" ABI_X86="(64)"


Reproducible: Always

[Comment 1 Agostino Sarubbo 2023-05-02 15:08:41 UTC]

ci has reproduced this issue with version 4.0.3_p20230326 - Updating summary.

[Comment 2 Agostino Sarubbo 2023-05-03 10:43:52 UTC]

ci has reproduced this issue with version 4.0.3_p20230326-r1 - Updating summary.