artificio Apprentice
Joined: 15 Sep 2004 Posts: 183
|
Posted: Tue Jan 03, 2006 3:51 am Post subject: Insecure binaries detected? |
|
|
I'm installing a third party tool chain, and run into this error during compilation. Anyone know what it actually means, and how to get around it? And here's the output.
Code: | QA Notice: the following files contain insecure RUNPATH's
Please file a bug about this at http://bugs.gentoo.org/
For more information on this issue, kindly review:
http://bugs.gentoo.org/81745
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/c++:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0
.7.5/client/ior usr/cca/lib/libcca_0_7_5_b_0.9.8-c++.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/java:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-
0.7.5/client/ior usr/cca/lib/libcca_0_7_5_b_0.9.8-java.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/f77:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0
.7.5/client/ior usr/cca/lib/libcca_0_7_5_b_0.9.8-f77.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/ior usr/cca/lib/cca-spec-babel-0_7_5-babel-0.9.8/libcca-ior.so.
0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/c:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0.7
.5/client/ior usr/cca/lib/cca-spec-babel-0_7_5-babel-0.9.8/libcca-c.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/java:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-
0.7.5/client/ior usr/cca/lib/cca-spec-babel-0_7_5-babel-0.9.8/libcca-java.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/c++:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0
.7.5/client/ior usr/cca/lib/cca-spec-babel-0_7_5-babel-0.9.8/libcca-c++.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/f77:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0
.7.5/client/ior usr/cca/lib/cca-spec-babel-0_7_5-babel-0.9.8/libcca-f77.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/ior usr/cca/lib/libcca_0_7_5_b_0.9.8-ior.so.0.0.0
/usr/cca/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.5:/var/tmp/portage/cca-spec-babel-0.7.5/work
/cca-spec-babel-0.7.5/client/c:/var/tmp/portage/cca-spec-babel-0.7.5/work/cca-spec-babel-0.7
.5/client/ior usr/cca/lib/libcca_0_7_5_b_0.9.8-c.so.0.0.0
!!! ERROR: sys-cluster/cca-spec-babel-0.7.5 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message. |
edit-I also pulled this from google
Quote: | TEXTREL's ... binary files which contain text relocations ... see 'prepstrip' for a full description unsafe files ... basically files that are setid and writable by Other users i've added the following QA checks to portage HEAD (no idea when they'll hit a release): Insecure RUNPATHs ... binary files which have RUNPATH's encoded in them which are in +t directories Executable stacks ... binary files whose stack is marked with +x ... will bomb on amd64 for example |
What are +t directories? Can I modify something to fix this somehow?
Last edited by artificio on Tue Jan 03, 2006 4:03 am; edited 1 time in total |
|