RPM Community Forums

Mailing List Message of <rpm-devel>

rpm-5.0.2 and selinux execmod bug

From: devzero2000 <pinto.elia@gmail.com>
Date: Wed 27 Feb 2008 - 17:39:04 CET
Message-ID: <b086760e0802270839q6519354p268dba7f208169b8@mail.gmail.com>
Hi

After having updated  RPM to 5.0.2 on my RHEL5.1 with Selinux enabled
(targeted mode)
 I have found the following error:

$rpm -qa
rpm: error while loading shared libraries: /usr/lib/librpmio-5.0.so: cannot
restore segment prot after reloc: Permission denied

$ ausearch -m avc
........


time->Wed Feb 27 17:19:15 2008
type=SYSCALL msg=audit(1204129155.269:213127): arch=40000003 syscall=125
success=no exit=-13 a0=110000 a1=50000 a2=5 a3=bf8f55e0 items=0 ppid=20849
pid=21137 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=pts1 comm="rpm" exe="/bin/rpm" subj=root:system_r:unconfined_t:s0-s0:
c0.c1023 key=(null)
type=AVC msg=audit(1204129155.269:213127): avc:  denied  { execmod } for
pid=21137 comm="rpm" path="/usr/lib/librpmio-5.0.so" dev=dm-0 ino=7188509
scontext=root:system_r:unconfined_t:s0-s0:c0.c1023tcontext=system_u:object_r:lib_t:s0
tclass=file

$  eu-findtextrel /usr/lib/librpmmisc-5.0.so
../db/common/db_err.c not compiled with -fpic/-fPIC
/home/machbuild/rpmbuild/BUILD/rpm-5.0.2/lua/lauxlib.c not compiled with
-fpic/-fPIC
/home/machbuild/rpmbuild/BUILD/rpm-5.0.2/lua/lapi.c not compiled with
-fpic/-fPIC

It seems that in the building there is the problem described here:
http://people.redhat.com/drepper/textrelocs.html

Have i done some mistake - probably - or it is a true bug in the linker opt?


I enclose the spec.

Thanks for the collaboration



  • application/octet-stream attachment: rpm5.spec
Received on Wed Feb 27 17:39:07 2008
Driven by Jeff Johnson and the RPM project team.
Hosted by OpenPKG and Ralf S. Engelschall.
Powered by FreeBSD and OpenPKG.