Bug 99400 – glibc-2.3.5 can not create locale data on a hardened system

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Steve Yin 2005-07-17 23:56:12 UTC]

3 days ago glibc-2.3.5 was set to stable, so I deciced to update to 2.3.5 on my
3 hardened-gentoo servers.

Everything goes well until the creation of locale data, all kinds of killed or
grsec error. I studied the log, then set RLIMIT_CORE to unlimited, then there is
still pax error, like this:
PAX: terminating task: /var/tmp/portage/glibc-2.3.5/work/build-default-i686-pc-l
inux-gnu-nptl/elf/ld.so(ld.so):22162, uid/euid: 0/0, PC: 5d75bab0, SP: 5d75b920
PAX: bytes at PC: b9 40 c0 75 5d e9 e6 6a 91 aa 09 08 06 00 00 00 0a 00 00 00 
PAX: bytes at SP: 080738d6 00000001 14f7a398 00000000 25d36b30 25d39650 14fdaa7c
 00000004 00000054 00000058 0000005c 0000045c 00000a6c 00000a70 00000a74 00000a7
4 00000a74 00000a74 14fdafa8 00000010 

then after emerge is done, none of locale data was usable.

Reproducible: Always
Steps to Reproduce:
1.emerge --sync to update portage on hardened system
2.emerge glibc to upgrade to 2.3.5
3.none of locale data can be generated.

[Comment 1 Steve Yin 2005-07-17 23:59:11 UTC]

my emerge info

Portage 2.0.51.22-r1 (hardened/x86/2.6, gcc-3.3.5-20050130, glibc-2.3.5-r0, 2.6.
11-hardened-r15 i686)
=================================================================
System uname: 2.6.11-hardened-r15 i686 Pentium III (Coppermine)
Gentoo Base System version 1.6.12
dev-lang/python:     2.3.5
sys-apps/sandbox:    1.2.10
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r10
sys-devel/libtool:   1.5.18-r1
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -fomit-frame-pointer -pipe -DNDEBUG"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X1
1/xkb /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/
config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/
 /usr/share/texmf/xdvi/ /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium3 -fomit-frame-pointer -pipe -DNDEBUG"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://mirror.datapipe.net/pub/gentoo"
LANG="en_US.UTF-8"
MAKEOPTS="-j5"
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X Xaw3d a52 aac aalib accessibility acl acpi adns aim alsa apache2 apm atla
s authdaemond avi bash-completion bcmath berkdb bidi bitmap-fonts bluetooth bmp 
bonobo bzlib calendar canna caps cdparanoia cdr cjk crypt cscope ctype cups curl
 curlwrappers dbase dbm dbx dedicated dio divx4linux dlloader dmx dv dvd dvdr dv
dread emacs-w3 encode esd ethereal evo exif expat fam fastcgi fbcon ffmpeg filep
ro flac flash flatfile font-server foomaticdb fortran freetds freetype freewnn f
tp gb gd gdbm geoip gif gimpprint ginac glut gmp gnome gnustep gnutls gphoto2 gp
m gps gstreamer gtk gtk2 gtkhtml guile hal hardened icc icc-pgo iconv icq ifc im
agemagick imap imlib inifile innodb ipv6 ithreads jabber java javascript jikes j
oystick jpeg junit kde kerberos krb4 ladcca lcms ldap leim lesstif libcaca libed
it libg++ libgda libwww lirc lm_sensors m17n-lib maildir mailwrapper matroska mb
ox mcal mcve memlimit mhash mikmod milter mime ming mmap mmx mng mono motif mozi
lla mp3 mpeg mpi msn mule mysql mysqli ncurses neXt netcdf nhc98 nis nls nocardb
us nocd nptl nptlonly odbc offensive ofx openal opengl oscar pam pcmcia pcntl pc
re pda pdflib perl php pic pie plotutils png pnp posix postgres ppds prelude pro
file python qt quicktime readline recode ruby samba sasl scanner session sftplog
ging sharedext sharedmem shorten simplexml skey slang slp snmp soap sockets sock
s5 sox speex spell spl sqlite sse ssl svg symlink sysfs sysvipc szip tcltk tcpd 
tetex theora threads tidy tiff tokenizer truetype trusted unicode usb v4l vcd vh
osts videos voodoo3 wavelan wddx wifi wmf wxwindows x86 xface xine xinerama xml 
xml2 xmlrpc xosd xpm xprint xsl xv xvid yahoo yaz zeo zlib userland_GNU kernel_l
inux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LC_ALL, LDFLAGS, LINGUAS

[Comment 2 solar (RETIRED) 2005-07-18 04:40:32 UTC]

*** This bug has been marked as a duplicate of 85718 ***