[20204] in Kerberos_V5_Development
Re: Permissions for shared libraries in Kerberos
daemon@ATHENA.MIT.EDU (Robbie Harwood)
Wed Nov 18 15:38:59 2020
From: Robbie Harwood <rharwood@redhat.com>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>, krbdev@mit.edu
In-Reply-To: <jlgmtze5rl5.fsf@redhat.com>
Date: Wed, 18 Nov 2020 15:38:35 -0500
Message-ID: <jlgk0ui5rjo.fsf@redhat.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3219960739131955460=="
Errors-To: krbdev-bounces@mit.edu
--===============3219960739131955460==
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain
Robbie Harwood <rharwood@redhat.com> writes:
> Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
>
>> I have been working on packaging up our Kerberos code into a RPM (to
>> upgrade our ancient dusty old Kerberos RPMs), and I had been running
>> into a problem where shared library dependencies were not being
>> processed properly. More specifically, the executables were saying,
>> "hey, I depend on libkrb5.so(FOO)", but the RPM wouldn't ever figure
>> out the shared library PROVIDED "libkrb5.so(FOO)", so you'd get a
>> bunch of unresolved dependencies. We had this same problem with our
>> ancient old dusty Kerberos RPMs, but I wanted to fix this correctly
>> for once.
>>
>> Fast forward a distressingly large number of late-night hours later
>> digging into the guts of RPM, the reason for this is simple. The
>> automatic dependency scripts only extract symbols from shared
>> libraries if they have the execute bit set, and MIT Kerberos installs
>> all of the shared libraries as mode 644.
>
> Fedora seems to take care of this transparently - I don't have any
> special logic to mark them executable.
Gah, spoke too soon. I patch shlib.conf to make install them
executable.
Thanks,
--Robbie
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=ggqH
-----END PGP SIGNATURE-----
--=-=-=--
--===============3219960739131955460==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============3219960739131955460==--
