Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 726096 - www-servers/monkeyd calls ar directly
Summary: www-servers/monkeyd calls ar directly
Status: RESOLVED PKGREMOVED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: tc-directly
  Show dependency tree
 
Reported: 2020-05-29 13:56 UTC by Agostino Sarubbo
Modified: 2024-09-18 06:30 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,22.41 KB, text/plain)
2020-05-29 13:56 UTC, Agostino Sarubbo
Details
other.tar.bz2 (other.tar.bz2,5.52 KB, application/x-bzip2)
2020-05-29 13:56 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2020-05-29 13:56:35 UTC
This is an auto-filed bug because www-servers/monkeyd calls ar directly.
The issue was originally discovered on amd64, but it may be reproducible on other arches as well.
If you think that a different summary clarifies the issue better, feel free to change it.
Attached build log and emerge --info.

NOTE:
If you think it doesn't make sense fix these type of issues, I'd like to point out that won't be possible use a different AR implementation (like llvm-ar) by setting the AR variable. So this issue has been reproduced by setting the AR variable to x86_64-pc-linux-gnu-ar and by removing the /usr/bin/ar binary.
Comment 1 Agostino Sarubbo gentoo-dev 2020-05-29 13:56:40 UTC
Created attachment 642502 [details]
build.log

build log and emerge --info
Comment 2 Agostino Sarubbo gentoo-dev 2020-05-29 13:56:42 UTC
Created attachment 642504 [details]
other.tar.bz2

other logs
Comment 3 Larry the Git Cow gentoo-dev 2024-08-03 14:24:13 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d4d491e79120e823b699f262e6ad749022cb3982

commit d4d491e79120e823b699f262e6ad749022cb3982
Author:     Michael Orlitzky <mjo@gentoo.org>
AuthorDate: 2024-08-03 14:14:19 +0000
Commit:     Michael Orlitzky <mjo@gentoo.org>
CommitDate: 2024-08-03 14:20:17 +0000

    profiles: mask {acct-user,acct-group,www-servers}/monkeyd for removal
    
    Outdated, unmaintained package with a hijacked website. Probably not
    what you want facing the world on port 80.
    
    Bug: https://bugs.gentoo.org/726096
    Bug: https://bugs.gentoo.org/733676
    Bug: https://bugs.gentoo.org/880495
    Bug: https://bugs.gentoo.org/898842
    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

 profiles/package.mask | 10 ++++++++++
 1 file changed, 10 insertions(+)
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-18 06:30:27 UTC
commit 130bba0d76b0a7925d2fd177b5e17b35bc292ab6
Author: Michael Orlitzky <mjo@gentoo.org>
Date:   Wed Sep 4 10:14:30 2024 -0400

    profiles: remove www-servers/monkeyd mask (treecleaned)

    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

commit 0cdc4fe8685f3a3b3835bba3180574cae0d18903
Author: Michael Orlitzky <mjo@gentoo.org>
Date:   Wed Sep 4 10:12:36 2024 -0400

    acct-group/monkeyd: treeclean

    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

commit d52df263602c6a9b2574af21e9b34379dabd03dc
Author: Michael Orlitzky <mjo@gentoo.org>
Date:   Wed Sep 4 10:12:27 2024 -0400

    acct-user/monkeyd: treeclean

    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

commit 73fc018ba8f073441beb053067843a132c111390
Author: Michael Orlitzky <mjo@gentoo.org>
Date:   Wed Sep 4 10:06:57 2024 -0400

    www-servers/monkeyd: treeclean

    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>