[20203] in Kerberos_V5_Development
Re: Permissions for shared libraries in Kerberos
daemon@ATHENA.MIT.EDU (Robbie Harwood)
Wed Nov 18 15:38:14 2020
From: Robbie Harwood <rharwood@redhat.com>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>, krbdev@mit.edu
In-Reply-To: <202011181631.0AIGV0bk017703@hedwig.cmf.nrl.navy.mil>
Date: Wed, 18 Nov 2020 15:37:42 -0500
Message-ID: <jlgmtze5rl5.fsf@redhat.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6108400663896436970=="
Errors-To: krbdev-bounces@mit.edu
--===============6108400663896436970==
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain
Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
> I have been working on packaging up our Kerberos code into a RPM (to
> upgrade our ancient dusty old Kerberos RPMs), and I had been running
> into a problem where shared library dependencies were not being
> processed properly. More specifically, the executables were saying,
> "hey, I depend on libkrb5.so(FOO)", but the RPM wouldn't ever figure
> out the shared library PROVIDED "libkrb5.so(FOO)", so you'd get a
> bunch of unresolved dependencies. We had this same problem with our
> ancient old dusty Kerberos RPMs, but I wanted to fix this correctly
> for once.
>
> Fast forward a distressingly large number of late-night hours later
> digging into the guts of RPM, the reason for this is simple. The
> automatic dependency scripts only extract symbols from shared
> libraries if they have the execute bit set, and MIT Kerberos installs
> all of the shared libraries as mode 644.
Fedora seems to take care of this transparently - I don't have any
special logic to mark them executable.
Thanks,
--Robbie
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=GWLU
-----END PGP SIGNATURE-----
--=-=-=--
--===============6108400663896436970==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============6108400663896436970==--
