Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 616180 - sys-auth/polkit-0.113 - Failed to set XATTR_PAX markings -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest.
Summary: sys-auth/polkit-0.113 - Failed to set XATTR_PAX markings -mre test/polkitback...
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal with 1 vote (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-04-21 07:25 UTC by Coacher
Modified: 2017-12-04 13:00 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info polkit (info,7.36 KB, text/plain)
2017-04-21 07:25 UTC, Coacher
Details
build.log (build.log,135.91 KB, text/plain)
2017-05-07 22:03 UTC, Coacher
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Coacher 2017-04-21 07:25:44 UTC
Created attachment 470536 [details]
emerge --info polkit

Hello.

After polkit is built the following message is displayed:

 * Messages for package sys-auth/polkit-0.113:

 * Failed to set XATTR_PAX markings -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest.

This can't be good.

Please fix.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-04-21 07:57:58 UTC
I think this is only relevant to Hardened.
Comment 2 Jason Zaman gentoo-dev 2017-04-21 08:19:43 UTC
do you have PAX_MARKINGS set in your make.conf?
is your /var/tmp/portage/ on a tmpfs?

and what happens if you try to manually do:
paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest
Comment 3 Coacher 2017-05-07 22:01:58 UTC
(In reply to Jason Zaman from comment #2)
> do you have PAX_MARKINGS set in your make.conf?
No.
> is your /var/tmp/portage/ on a tmpfs?
No.
> and what happens if you try to manually do:
> paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest
~ # cd /var/tmp/portage/sys-auth/polkit-0.113/work/polkit-0.113/
polkit-0.113 # paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest-su: paxctl-ng: command not found
Comment 4 Coacher 2017-05-07 22:03:00 UTC
Created attachment 471906 [details]
build.log
Comment 5 Coacher 2017-05-07 22:05:15 UTC
(In reply to Coacher from comment #3)
> (In reply to Jason Zaman from comment #2)
> > do you have PAX_MARKINGS set in your make.conf?
> No.
> > is your /var/tmp/portage/ on a tmpfs?
> No.
> > and what happens if you try to manually do:
> > paxctl-ng -mre test/polkitbackend/.libs/polkitbackendjsauthoritytest
> ~ # cd /var/tmp/portage/sys-auth/polkit-0.113/work/polkit-0.113/
> polkit-0.113 # paxctl-ng -mre
> test/polkitbackend/.libs/polkitbackendjsauthoritytest-su: paxctl-ng: command
> not found
Adding to this:
# ls test/polkitbackend/.libs/polkitbackendjsauthoritytest
ls: cannot access 'test/polkitbackend/.libs/polkitbackendjsauthoritytest': No such file or directory

I guess tests are not built without test USE.
Comment 6 Gilles Dartiguelongue gentoo-dev 2017-09-30 09:21:25 UTC
Indeed, tests are built according to test USE flag, however even if it is not built, PAX marking  does not fail on my system because it looks like paxctl-ng does not fail when given multiple files, some of which does not exist.

So it looks like you could fix it by just upgrading your paxctl installation but there might be something for hardened to look into with paxctl-ng behavior.
Comment 7 groepaz 2017-12-04 13:00:55 UTC
i saw this message in my log after world update after recent profile switch... i'm not using hardened either (basically what comment3 says...). that message is kindof irritating, it should at least be a bit more verbose IMHO