Hi, i'm using the hardend profile and during the update because of glsa-200608-28, i getting QA concers on php-4.4.3-r1 and also on the newer dev-lang/php-4.4.4-r4 (i think the newer is important). This is the last output from emerge: * Installing SAPI(s) cli apache2 * * Installing CLI SAPI * Setting extension_dir in php.ini * Securing fopen wrappers * Setting correct include_path * Installing Apache2 SAPI Installing PHP SAPI module: apache2handler /usr/lib/apache2/build/instdso.sh SH_LIBTOOL='/usr/share/apr-0/build/libtool' libphp4.la /var/tmp/portage/php-4.4.4-r4/image//usr/lib/apache2/modules /usr/share/apr-0/build/libtool --mode=install cp libphp4.la /var/tmp/portage/php-4.4.4-r4/image//usr/lib/apache2/modules/ cp .libs/libphp4.so /var/tmp/portage/php-4.4.4-r4/image//usr/lib/apache2/modules/libphp4.so cp .libs/libphp4.lai /var/tmp/portage/php-4.4.4-r4/image//usr/lib/apache2/modules/libphp4.la libtool: install: warning: remember to run `libtool --finish /var/tmp/portage/php-4.4.4-r4/work/php-4.4.4/libs' chmod 755 /var/tmp/portage/php-4.4.4-r4/image//usr/lib/apache2/modules/libphp4.so * Installing Apache2 config file for PHP4 (70_mod_php.conf) * Setting extension_dir in php.ini * Securing fopen wrappers * Setting correct include_path >>> Completed installing php-4.4.4-r4 into /var/tmp/portage/php-4.4.4-r4/image/ man: strip: i686-pc-linux-gnu-strip --strip-unneeded usr/lib/php4/bin/php usr/lib/apache2/modules/libphp4.so QA Notice: the following files contain runtime text relocations Text relocations force the dynamic linker to perform extra work at startup, waste system resources, and may pose a security risk. On some architectures, the code may not even function properly, if at all. For more information, see http://hardened.gentoo.org/pic-fix-guide.xml Please include this file in your report: /var/tmp/portage/php-4.4.4-r4/temp/scanelf-textrel.log "TEXTREL usr/lib/apache2/modules/libphp4.so" !!! ERROR: dev-lang/php-4.4.4-r4 failed. Call stack: misc-functions.sh, line 409: Called install_qa_check misc-functions.sh, line 166: Called die !!! Aborting due to QA concerns: textrels, !!! If you need support, post the topmost build error, and the call stack if relevant. !!! install_qa_check failed; exiting. because of the size of scanelf-textrel.log i copied it here -> http://www.zengers.de/~roude/tmp/php4-scanelf-textrel.log here comes emerge --info : :\ emerge --info Portage 2.1-r2 (hardened/x86, gcc-3.4.5, glibc-2.3.5-r2, 2.4.32-hardened i686) ================================================================= System uname: 2.4.32-hardened i686 AMD Sempron(tm) 2500+ Gentoo Base System version 1.6.14 app-admin/eselect-compiler: [Not Present] dev-java/java-config: [Not Present] dev-lang/python: 2.3.5-r2, 2.4.2 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/gcc-config: 1.3.12-r6 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/snort/ /etc/terminfo" CXXFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig digest distlocks metadata-transfer parallel-fetch sandbox sfperms strict stricter" GENTOO_MIRRORS="http://mirrors.sec.informatik.tu-darmstadt.de/gentoo/ http://pandemonium.tiscali.de/pub/gentoo/ http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://gentoo.mirror.solnet.ch http://ftp.uni-erlangen.de/pub/mirrors/gentoo" LANG="de_DE@euro" LC_ALL="de_DE@euro" LINGUAS="de" MAKEOPTS="-j2" PKGDIR="/usr/portage//packages/x86/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/" PORTDIR_OVERLAY="/usr/local/portage-overlay" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="x86 apache2 bash-completion bashlogger bzip2 cli crypt doc expat extensions ffmpeg gd hardened imagemagick imap jpeg lm_sensors login-watch mbox memlimit mounts-check mysql netpbm nls pam pcre perl php png prelude python sasl session ssl suidcheck unicode userlocales utf8 vhosts zip zlib elibc_glibc input_devices_mouse input_devices_keyboard kernel_linux linguas_de userland_GNU" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS output von scanelf: :\ scanelf -lpqt TEXTREL /bin/gzip reemerging gzip gives me qa errors too hope i missed nothing and the category fits ;-) thx in advise greetz alex
Created attachment 97680 [details] scanelf-textrel.log scanelf-textrel.log
Comment on attachment 97680 [details] scanelf-textrel.log made scanelf-textrel.log an attachment for easier access
Hi. This is known and expected, please compile dev-lang/php with the "pic" USE flag turned on to get rid of the TEXTRELs (QA concerns). This is not default for the simple fact that when PHP is compiled with "pic" enabled, it gets about 20% slower, and only some Hardened-Gentoo/PaX configurations really _need_ this to be enabled, so it's an option, and we let the user choose. This is also part of the messages that the ebuild outputs at the end of the emerge process. See bug #92776 for more details on all this. Best regards, CHTEKK. *** This bug has been marked as a duplicate of 92776 ***
