Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 498256 - sys-cluster/util-vserver should not depend on dev-libs/dietlibc
Summary: sys-cluster/util-vserver should not depend on dev-libs/dietlibc
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal enhancement with 2 votes (vote)
Assignee: Patrice Clement
URL:
Whiteboard:
Keywords: PMASKED, PullRequest
Depends on:
Blocks: 585746
  Show dependency tree
 
Reported: 2014-01-16 14:37 UTC by Jeroen Roovers (RETIRED)
Modified: 2019-04-13 06:58 UTC (History)
7 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
ebuild with dietlibc USE flag (util-vserver-0.30.216_pre3120-r5.ebuild,3.61 KB, text/plain)
2019-03-26 10:45 UTC, Sandino Araico Sanchez
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jeroen Roovers (RETIRED) gentoo-dev 2014-01-16 14:37:32 UTC
It builds fine against sys-libs/glibc, for one thing.
Comment 1 Homer Parker (RETIRED) gentoo-dev 2014-03-16 11:06:14 UTC
Daniel Hozac has stated it's a security issue. From #vserver on OFTC:

2014-02-20 07:01:51 <alpha_one_x86>     daniel_hozac:  No way to have verser-utils on glibc no dietlibc?
2014-02-20 07:02:36 <daniel_hozac>      there is, just be aware that it is untested and insecure.

I can't find any recent mailing list posts about it.
Comment 2 Pacho Ramos gentoo-dev 2014-07-01 09:15:59 UTC
Also explained at:
https://bugs.gentoo.org/show_bug.cgi?id=423799#c6
Comment 3 Pacho Ramos gentoo-dev 2018-02-06 08:05:19 UTC
This would be interesting to achieve as our dietlibc package is completely unmaintained and has many unresolved opened bugs :/
Comment 4 Sandino Araico Sanchez 2019-03-25 20:06:50 UTC
>=sys-cluster/util-vserver-0.30.216_pre3120 compiles fine with =dev-libs/dietlibc-0.34 (Bug 676460)
Comment 5 Sandino Araico Sanchez 2019-03-26 08:53:35 UTC
The reason util-vserver should depend on dietlibc is explained in this thread http://archives.linux-vserver.org/201112/0046.html
Comment 6 Sandino Araico Sanchez 2019-03-26 08:55:51 UTC
On 19/12/11 08:02, Herbert Poetzl wrote:
> dietlibc isn't just used to replace glibc, it is used to
> build static binaries which are actually 'static'
> note that glibc cannot build self contained binaries
> anymore, even if you build them 'statically' they will
> dynamically load resolver libraries, which in the case
> of guest management might be from the host or from the
> guest
Comment 7 Sandino Araico Sanchez 2019-03-26 09:46:34 UTC
More from the same Herbert Poetzl's answer:
> ...anytime you start or enter the guest, you
> have a certain chance that the host will execute some
> code from the guest system (nss) which in turn gives
> guest root a good chance to do evil things on the host
> and even if security is not a concern in your case, you
> might end up with unexpected failures
Comment 8 Sandino Araico Sanchez 2019-03-26 10:45:40 UTC
Created attachment 570836 [details]
ebuild with dietlibc USE flag

This ebuild used dietlibc USE flag.

If dietlibc USE flag is not set util-vserver will be compiled with --disable-dietlibc and dietlibc-includes patch will not be applied.

I have tested it on amd64 with binutils 2.32, dietlibc 0.34.
USE=-dietlibc and USE=dietlibc; both compile correctly.
Comment 9 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-04-13 06:58:47 UTC
Package removed.