Gentoo Archives: gentoo-hardened

From: Ernesto Rodriguez Ortiz <eortiz@×××××××××××××××.cu>
To: gentoo-hardened <gentoo-hardened@l.g.o>
Subject: [gentoo-hardened] glibc
Date: Wed, 08 Oct 2008 20:05:00
Message-Id: 16957321.389061223487765828.JavaMail.root@zimbra2.uci.cu
1 Hello here, I have some problems compiled glibc, I am trying to install a server with PaX and SELinux, I have an decompressing stage3 hardened and portage, change the profile for selinux/2007.0/x86/hardened and set the make.conf as a show down .Any idea how I can fix the problem with glibc?
2
3 Portage 2.1.4.4 (selinux/2007.0/x86/hardened, gcc-3.4.6, glibc-2.6.1-r0, 2.6.25-gentoo-r7 i686)
4 =================================================================
5 System uname: 2.6.22-nova-r9 i686 unknown
6 Timestamp of tree: Mon, 22 Sep 2008 01:45:01 +0000
7 app-shells/bash: 3.2_p33
8 dev-lang/python: 2.4.4-r6
9 dev-python/pycrypto: 2.0.1-r6
10 sys-apps/baselayout: 1.12.11.1
11 sys-apps/sandbox: 1.2.18.1-r2
12 sys-devel/autoconf: 2.61-r2
13 sys-devel/automake: 1.10
14 sys-devel/binutils: 2.18-r3
15 sys-devel/gcc-config: 1.4.0-r4
16 sys-devel/libtool: 1.5.24
17 virtual/os-headers: 2.6.23-r3
18 ACCEPT_KEYWORDS="x86"
19 CBUILD="i686-pc-linux-gnu"
20 CFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer -fstack-protector-all"
21 CHOST="i686-pc-linux-gnu"
22 CONFIG_PROTECT="/etc /usr/share/X11/xkb"
23 CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/udev/rules.d"
24 CXXFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer -fstack-protector-all"
25 DISTDIR="/usr/portage/distfiles"
26 FEATURES="distlocks loadpolicy metadata-transfer sandbox selinux sesandbox sfperms strict unmerge-orphans userfetch"
27 GENTOO_MIRRORS="http://10.128.50.122"
28 LANG="C"
29 LINGUAS="es en"
30 MAKEOPTS="-j2"
31 PKGDIR="/usr/portage/packages"
32 PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
33 PORTAGE_TMPDIR="/var/tmp"
34 PORTDIR="/usr/portage"
35 SYNC="rsync://10.128.50.122/gentoo-portage"
36 USE="acl acpi alsa apm bash-completion berkdb cdr cli cracklib crypt cups curl dbus directfb dri dvd dvdr encode esd fam fortran freetype gdbm gnutls gpm hal hardened iconv isdnlog kerberos libwww midi mudflap ncurses nls nntp nptl nptlonly openmp oss pam pcmcia pcre perl pic png ppds pppd python readline reflection selinux session slang snmp speex spell spl sse sse2 ssl svg tcpd threads truetype-fonts usb v4l vcd x86 xml xml2 xorg xulrunner zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="mouse keyboard" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="es en" USERLAND="GNU" VIDEO_CARDS="i810 chips i128 i740 imstt vesa vga"
37 Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
38
39
40 >>> Emerging (1 of 29) sys-libs/glibc-2.6.1 to /
41 * glibc-ports-2.6.1.tar.bz2 RMD160 SHA1 SHA256 size ;-) ... [ ok ]
42 * glibc-2.6.1.tar.bz2 RMD160 SHA1 SHA256 size ;-) ... [ ok ]
43 * glibc-2.6.1-patches-1.2.tar.bz2 RMD160 SHA1 SHA256 size ;-) ... [ ok ]
44 * glibc-libidn-2.6.1.tar.bz2 RMD160 SHA1 SHA256 size ;-) ... [ ok ]
45 * checking ebuild checksums ;-) ... [ ok ]
46 * checking auxfile checksums ;-) ... [ ok ]
47 * checking miscfile checksums ;-) ... [ ok ]
48 * checking glibc-2.6.1.tar.bz2 ;-) ... [ ok ]
49 * checking glibc-libidn-2.6.1.tar.bz2 ;-) ... [ ok ]
50 * checking glibc-ports-2.6.1.tar.bz2 ;-) ... [ ok ]
51 * checking glibc-2.6.1-patches-1.2.tar.bz2 ;-) ... [ ok ]
52 >>> Unpacking source...
53 * Checking gcc for __thread support ... [ ok ]
54 * Checking kernel version (>=2.6.9) ... [ ok ]
55 * Checking linux-headers version (>=2.6.9) ... [ ok ]
56 >>> Unpacking glibc-2.6.1.tar.bz2 to /var/tmp/portage/sys-libs/glibc-2.6.1/work
57 >>> Unpacking glibc-ports-2.6.1.tar.bz2 to /var/tmp/portage/sys-libs/glibc-2.6.1/work/glibc-2.6.1
58 >>> Unpacking glibc-libidn-2.6.1.tar.bz2 to /var/tmp/portage/sys-libs/glibc-2.6.1/work/glibc-2.6.1
59 >>> Unpacking glibc-2.6.1-patches-1.2.tar.bz2 to /var/tmp/portage/sys-libs/glibc-2.6.1/work
60 * Applying Gentoo Glibc Patchset 2.6.1-1.2 ...
61 * 0010_all_glibc-ssp-compat.patch ... [ ok ]
62 * 0030_all_glibc-respect-env-CPPFLAGS.patch ... [ ok ]
63 * 1018_all_glibc-awk-in-C-locale.patch ... [ ok ]
64 * 1020_all_glibc-inet-headers.patch ... [ ok ]
65 * 1025_all_glibc-gcc-4.3-include-fixed.patch ... [ ok ]
66 * 1030_all_glibc-manual-no-perl.patch ... [ ok ]
67 * 1035_all_glibc-respect-build-programs.patch ... [ ok ]
68 * 1040_all_2.3.3-localedef-fix-trampoline.patch ... [ ok ]
69 * 1045_all_glibc-handle-long-kernel-versions.patch ... [ ok ]
70 * 1055_all_glibc-resolv-dynamic.patch ... [ ok ]
71 * 1060_all_glibc-cvs-getcwd-path-max.patch ... [ ok ]
72 * 1065_all_glibc-2.7-nscd-paranoia-segv.patch ... [ ok ]
73 * 1075_all_glibc-section-comments.patch ... [ ok ]
74 * 1090_all_glibc-2.3.6-fix-pr631.patch ... [ ok ]
75 * 1100_all_glibc-2.3.3-china.patch ... [ ok ]
76 * 1103_all_glibc-new-valencian-locale.patch ... [ ok ]
77 * 1120_all_glibc-2.5-strict-aliasing.patch ... [ ok ]
78 * 1130_all_glibc-2.4-undefine-__i686.patch ... [ ok ]
79 * 1505_all_glibc-hppa-elf-relocs.patch ... [ ok ]
80 * 1510_all_glibc-hppa-no-asm-elf-header.patch ... [ ok ]
81 * 1530_all_glibc-m68k-sys-user.patch ... [ ok ]
82 * 3000_all_2.3.6-dl_execstack-PaX-support.patch ... [ ok ]
83 * 3010_all_2.3.3_pre20040117-pt_pax.patch ... [ ok ]
84 * 3020_all_glibc-tests-sandbox-libdl-paths.patch ... [ ok ]
85 * 4010_all_2.3.5-hardened-iconvconfig-unnest.patch ... [ ok ]
86 * 5063_all_glibc-dont-build-timezone.patch ... [ ok ]
87 * 5070_all_cross-compile-nptl.patch ... [ ok ]
88 * 6001_all_alpha-glibc-2.4-xstat.patch ... [ ok ]
89 * 6015_all_alpha-glibc-2.5-no-page-header.patch ... [ ok ]
90 * 6016_all_alpha-glibc-2.5-no-asm-elf-header.patch ... [ ok ]
91 * 6220_all_glibc-2.4-arm-cirrus-ep93xx-maverick-crunch-fpu.patch ... [ ok ]
92 * 6230_all_arm-glibc-2.5-no-page-header.patch ... [ ok ]
93 * 6235_all_arm-glibc-RTLD_SINGLE_THREAD_P.patch ... [ ok ]
94 * 6400_all_sh-glibc-2.3.2-fpscr_values.patch ... [ ok ]
95 * 6415_all_sh-glibc-2.5-no-asm-user-header.patch ... [ ok ]
96 * 6416_all_sh-glibc-2.5-no-asm-elf-header.patch ... [ ok ]
97 * 6605_all_glibc-2.4-fpu-cw-mips.patch ... [ ok ]
98 * 6645_all_glibc-mips_shn_undef-hack.patch ... [ ok ]
99 * 6650_all_glibc-mips_gnu-hash_support.patch ... [ ok ]
100 * Done with patching
101 * Using GNU config files from /usr/share/libtool
102 * Updating scripts/config.sub [ ok ]
103 * Updating scripts/config.guess [ ok ]
104 * Patching to get working PIE binaries on PIE (hardened) platforms
105 * Applying glibc-2.5-hardened-pie.patch ... [ ok ]
106 * Applying glibc-2.5-hardened-configure-picdefault.patch ... [ ok ]
107 * Applying glibc-2.6-hardened-inittls-nosysenter.patch ... [ ok ]
108 * Installing Hardened Gentoo SSP handler
109 >>> Source unpacked.
110 >>> Compiling source in /var/tmp/portage/sys-libs/glibc-2.6.1/work/glibc-2.6.1 ...
111
112 * ABI: default
113 * CBUILD: i686-pc-linux-gnu
114 * CHOST: i686-pc-linux-gnu
115 * CTARGET: i686-pc-linux-gnu
116 * CBUILD_OPT:
117 * CTARGET_OPT:
118 * CC:
119 * CFLAGS: -march=i686 -pipe -fstack-protector-all -O2 -fno-strict-aliasing
120
121 * Configuring GLIBC for nptl with:
122 --enable-stackguard-randomization
123 --enable-old-ssp-compat
124 --enable-add-ons=nptl,c_stubs,libidn,ports
125 --enable-kernel=2.6.9
126 --with-selinux
127 --without-cvs
128 --enable-bind-now
129 --build=i686-pc-linux-gnu
130 --host=i686-pc-linux-gnu
131 --disable-profile
132 --without-gd
133 --with-headers=/usr/include
134 --prefix=/usr
135 --libdir=/usr/lib
136 --mandir=/usr/share/man
137 --infodir=/usr/share/info
138 --libexecdir=/usr/lib/misc/glibc
139
140 checking build system type... i686-pc-linux-gnu
141 checking host system type... i686-pc-linux-gnu
142 configure: running configure fragment for add-on nptl
143 configure: running configure fragment for add-on c_stubs
144 configure: running configure fragment for add-on libidn
145 checking add-on ports for preconfigure fragments... am33 arm hppa m68k mips
146 checking sysdep dirs... sysdeps/i386/elf nptl/sysdeps/unix/sysv/linux/i386/i686 nptl/sysdeps/unix/sysv/linux/i386 sysdeps/unix/sysv/linux/i386 nptl/sysdeps/unix/sysv/linux nptl/sysdeps/pthread sysdeps/pthread ports/sysdeps/unix/sysv/linux sysdeps/unix/sysv/linux sysdeps/gnu sysdeps/unix/common sysdeps/unix/mman sysdeps/unix/inet ports/sysdeps/unix/sysv/i386 sysdeps/unix/sysv/i386 nptl/sysdeps/unix/sysv ports/sysdeps/unix/sysv sysdeps/unix/sysv sysdeps/unix/i386 nptl/sysdeps/unix ports/sysdeps/unix sysdeps/unix sysdeps/posix sysdeps/i386/i686/fpu nptl/sysdeps/i386/i686 sysdeps/i386/i686 sysdeps/i386/i486 nptl/sysdeps/i386/i486 sysdeps/i386/fpu nptl/sysdeps/i386 sysdeps/i386 sysdeps/wordsize-32 sysdeps/ieee754/ldbl-96 sysdeps/ieee754/dbl-64 sysdeps/ieee754/flt-32 sysdeps/ieee754 sysdeps/generic/elf sysdeps/generic
147 checking for a BSD-compatible install... /usr/bin/install -c
148 checking whether ln -s works... yes
149 checking for i686-pc-linux-gnu-gcc... i686-pc-linux-gnu-gcc
150 checking for suffix of object files... o
151 checking whether we are using the GNU C compiler... yes
152 checking whether i686-pc-linux-gnu-gcc accepts -g... yes
153 checking for i686-pc-linux-gnu-gcc option to accept ANSI C... none needed
154 checking how to run the C preprocessor... i686-pc-linux-gnu-gcc -E
155 checking for i686-pc-linux-gnu-g++... i686-pc-linux-gnu-g++
156 checking whether we are using the GNU C++ compiler... yes
157 checking whether i686-pc-linux-gnu-g++ accepts -g... yes
158 checking whether /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/as is GNU as... yes
159 checking whether /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/ld is GNU ld... yes
160 checking for /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/as... /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/as
161 checking version of /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/as... 2.18, ok
162 checking for /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/ld... /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/ld
163 checking version of /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/ld... 2.18, ok
164 checking for pwd... /bin/pwd
165 checking for i686-pc-linux-gnu-gcc... (cached) i686-pc-linux-gnu-gcc
166 checking version of i686-pc-linux-gnu-gcc... 3.4.6, ok
167 checking for gnumake... no
168 checking for gmake... gmake
169 checking version of gmake... 3.81, ok
170 checking for gnumsgfmt... no
171 checking for gmsgfmt... gmsgfmt
172 checking version of gmsgfmt... 0.17, ok
173 checking for makeinfo... makeinfo
174 checking version of makeinfo... 4.11, ok
175 checking for sed... sed
176 checking version of sed... 4.1.5, ok
177 checking for autoconf... autoconf
178 checking whether autoconf works... yes
179 checking whether ranlib is necessary... no
180 checking LD_LIBRARY_PATH variable... ok
181 checking whether GCC supports -static-libgcc... -static-libgcc
182 checking for bash... /bin/sh
183 checking for gawk... gawk
184 checking for perl... /usr/bin/perl
185 checking for install-info... /usr/bin/install-info
186 checking for bison... /usr/bin/bison
187 checking for signed size_t type... no
188 checking for libc-friendly stddef.h... yes
189 checking whether we need to use -P to assemble .S files... no
190 checking whether .text pseudo-op must be used... yes
191 checking for assembler global-symbol directive... .globl
192 checking for .set assembler directive... no
193 checking for assembler .type directive prefix... @
194 checking for .symver assembler directive... yes
195 checking for ld --version-script... yes
196 checking for .previous assembler directive... yes
197 checking for .protected and .hidden assembler directive... yes
198 checking whether __attribute__((visibility())) is supported... yes
199 checking for broken __attribute__((visibility()))... no
200 checking for broken __attribute__((alias()))... no
201 checking whether to put _rtld_local into .sdata section... no
202 checking for .preinit_array/.init_array/.fini_array support... no
203 configure: error: Need linker with .init_array/.fini_array support.
204 *
205 * ERROR: sys-libs/glibc-2.6.1 failed.
206 * Call stack:
207 * ebuild.sh, line 49: Called src_compile
208 * environment, line 3379: Called eblit-run 'src_compile'
209 * environment, line 1104: Called eblit-glibc-src_compile
210 * src_compile.eblit, line 181: Called toolchain-glibc_src_compile
211 * src_compile.eblit, line 120: Called glibc_do_configure 'src_compile'
212 * src_compile.eblit, line 97: Called die
213 * The specific snippet of code:
214 * "${S}"/configure ${myconf} || die "failed to configure glibc"
215 * The die message:
216 * failed to configure glibc
217 *
218 * If you need support, post the topmost build error, and the call stack if relevant.
219 * A complete build log is located at '/var/log/portage/sys-libs:glibc-2.6.1:20081008-153540.log'.
220 * The ebuild environment file is located at '/var/tmp/portage/sys-libs/glibc-2.6.1/temp/environment'.
221 *
222
223 * Messages for package sys-libs/glibc-2.6.1:
224
225 *
226 * ERROR: sys-libs/glibc-2.6.1 failed.
227 * Call stack:
228 * ebuild.sh, line 49: Called src_compile
229 * environment, line 3379: Called eblit-run 'src_compile'
230 * environment, line 1104: Called eblit-glibc-src_compile
231 * src_compile.eblit, line 181: Called toolchain-glibc_src_compile
232 * src_compile.eblit, line 120: Called glibc_do_configure 'src_compile'
233 * src_compile.eblit, line 97: Called die
234 * The specific snippet of code:
235 * "${S}"/configure ${myconf} || die "failed to configure glibc"
236 * The die message:
237 * failed to configure glibc
238 *
239 * If you need support, post the topmost build error, and the call stack if relevant.
240 * A complete build log is located at '/var/log/portage/sys-libs:glibc-2.6.1:20081008-153540.log'.
241 * The ebuild environment file is located at '/var/tmp/portage/sys-libs/glibc-2.6.1/temp/environment'.
242 *

Replies

Subject Author
Re: [gentoo-hardened] glibc Magnus Granberg <zorry@×××.nu>
Re: [gentoo-hardened] glibc Mike Edenfield <kutulu@××××××.org>