Debian Bug report logs - #48120
gconv-modules would not be loaded properly when setgid

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Fumitoshi UKAI <ukai@debian.or.jp>

To: submit@bugs.debian.org

Subject: gconv-modules would not be loaded properly when setgid

Date: Sun, 24 Oct 1999 03:59:09 +0900

Package: gconv-modules
Version: 2.1.2-5
Severity: important

In debian-users (for Japense) mailing-list, someone found
that gconv-modules would not be loaded if it was setgid program.
For examples, `LANG=ja_JP.eucJP /usr/games/same-gnome'
(in gnome-same-gnome package) would not show any menu strings 
(of course, it should be Japanese).

It can be fixed by adding /usr/lib/gconv to /etc/ld.so.conf.
If /usr/lib/gconv in /etc/ld.so.conf, `LANG=ja_JP.eucJP /usr/games/same-gnome'
would works fine with Japanese menu strings.

However, I suspect this is bugs of glibc/icongdata/Makefile.
In this file, LDFLAGS for libJIS.so (and libKSC,libGB,libCNS) are
`-Wl,-soname,$(@F)' only, however others (such as EUC-JP.so) are
`-Wl,-rpath,'$$ORIGIN''.  When we checked same-gnome with strace,
it find "EUC-JP.so", but failed to find "libJIS.so".  So, it might be
fixed by adding -rpath,'$$ORIGIN' for LDFLAGS for libJIS.so,libKSC.so,
libGB.so and libCNS.so, but I've not yet checked it.

Best regards,
Fumitoshi UKAI

Message #10 received at 48120-maintonly@bugs.debian.org (full text, mbox, reply):

From: Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>

To: 48120-maintonly@bugs.debian.org

Subject: $ORIGIN and setuid/setgid

Date: 29 Oct 1999 17:21:03 +0900

I found this bug report in BTS.  I hope this problem can be
fixed by replacing '$$ORIGIN' with $(gconvdir) in the
Makefile, or adding another rpath option with $(gconvdir).

Because $ORIGIN in rpath is expanded by glibc 2.1.2 only if
non-setuid and non-setgid, use of $ORIGIN is not appropriate
in this case.

Omitting $ORIGIN in rpath will not be a problem until
someone copies those modules and tries to replace underlying
libraries with his own versions, I hope.
-- 
"Free software is not for free."
Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>
Hyper Linux Systems (Hypercore Software Design, Ltd.)
<URL:http://www.hypercore.co.jp/>

Message #13 received at 48120-forwarded@bugs.debian.org (full text, mbox, reply):

From: Joel Klecker <espy@debian.org>

To: libc-alpha@sourceware.cygnus.com

Cc: Fumitoshi UKAI <ukai@debian.or.jp>, Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>, 48120-forwarded@bugs.debian.org

Subject: Fwd: Bug#48120: gconv-modules would not be loaded properly when setgid

Date: Fri, 5 Nov 1999 06:57:21 -0800

[ `gconv-modules' is the Debian package which contains /usr/lib/gconv ]
I assume this behavior is intentional, but is it truly necessary?

>Subject: Bug#48120: gconv-modules would not be loaded properly when setgid
>Reply-To: Fumitoshi UKAI <ukai@debian.or.jp>, 48120@bugs.debian.org
>Date: Sun, 24 Oct 1999 03:59:09 +0900
>From: Fumitoshi UKAI <ukai@debian.or.jp>
>To: submit@bugs.debian.org
>
>Package: gconv-modules
>Version: 2.1.2-5
>Severity: important
>
>In debian-users (for Japense) mailing-list, someone found
>that gconv-modules would not be loaded if it was setgid program.
>For examples, `LANG=ja_JP.eucJP /usr/games/same-gnome'
>(in gnome-same-gnome package) would not show any menu strings
>(of course, it should be Japanese).
>
>It can be fixed by adding /usr/lib/gconv to /etc/ld.so.conf.
>If /usr/lib/gconv in /etc/ld.so.conf, `LANG=ja_JP.eucJP /usr/games/same-gnome'
>would works fine with Japanese menu strings.
>
>However, I suspect this is bugs of glibc/icongdata/Makefile.
>In this file, LDFLAGS for libJIS.so (and libKSC,libGB,libCNS) are
>`-Wl,-soname,$(@F)' only, however others (such as EUC-JP.so) are
>`-Wl,-rpath,'$$ORIGIN''.  When we checked same-gnome with strace,
>it find "EUC-JP.so", but failed to find "libJIS.so".  So, it might be
>fixed by adding -rpath,'$$ORIGIN' for LDFLAGS for libJIS.so,libKSC.so,
>libGB.so and libCNS.so, but I've not yet checked it.
>
>Best regards,
>Fumitoshi UKAI

This solution was proposed in a separate message:
>Subject: Bug#48120: $ORIGIN and setuid/setgid
>Reply-To: Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>,
>   48120-maintonly@bugs.debian.org
>To: 48120-maintonly@bugs.debian.org
>From: Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>
>Date: 29 Oct 1999 17:21:03 +0900
>
>I found this bug report in BTS.  I hope this problem can be
>fixed by replacing '$$ORIGIN' with $(gconvdir) in the
>Makefile, or adding another rpath option with $(gconvdir).
>
>Because $ORIGIN in rpath is expanded by glibc 2.1.2 only if
>non-setuid and non-setgid, use of $ORIGIN is not appropriate
>in this case.
>
>Omitting $ORIGIN in rpath will not be a problem until
>someone copies those modules and tries to replace underlying
>libraries with his own versions, I hope.
>--
>"Free software is not for free."
>Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>
>Hyper Linux Systems (Hypercore Software Design, Ltd.)
><URL:http://www.hypercore.co.jp/>
-- 
Joel Klecker (aka Espy)       <URL:mailto:espy@debian.org>
Debian Package Maintainer for the GNU C Library.

Message #14 received at 48120-forwarded@bugs.debian.org (full text, mbox, reply):

From: GOTO Masanori <gotom@debian.or.jp>

To: libc-alpha@sourceware.cygnus.com

Cc: Fumitoshi UKAI <ukai@debian.or.jp>, Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>, Joel Klecker <espy@debian.org>, 48120-forwarded@bugs.debian.org

Subject: Re: Fwd: Bug#48120: gconv-modules would not be loaded properly whensetgid

Date: Sat, 06 Nov 1999 03:00:01 +0900

I've tested this problem, but I don't have a clue well.

From: Joel Klecker <espy@debian.org>
Subject: Fwd: Bug#48120: gconv-modules would not be loaded properly whensetgid
> [ `gconv-modules' is the Debian package which contains /usr/lib/gconv ]
> I assume this behavior is intentional, but is it truly necessary?
>
> >Subject: Bug#48120: gconv-modules would not be loaded properly when setgid
> >Reply-To: Fumitoshi UKAI <ukai@debian.or.jp>, 48120@bugs.debian.org
> >Date: Sun, 24 Oct 1999 03:59:09 +0900
> >From: Fumitoshi UKAI <ukai@debian.or.jp>
> >To: submit@bugs.debian.org
> >
> >Package: gconv-modules
> >Version: 2.1.2-5
> >Severity: important
> >
> >In debian-users (for Japense) mailing-list, someone found
> >that gconv-modules would not be loaded if it was setgid program.
> >For examples, `LANG=ja_JP.eucJP /usr/games/same-gnome'
> >(in gnome-same-gnome package) would not show any menu strings
> >(of course, it should be Japanese).
> >
> >It can be fixed by adding /usr/lib/gconv to /etc/ld.so.conf.
> >If /usr/lib/gconv in /etc/ld.so.conf, `LANG=ja_JP.eucJP /usr/games/same-gnome'
> >would works fine with Japanese menu strings.

> >However, I suspect this is bugs of glibc/icongdata/Makefile.
> >In this file, LDFLAGS for libJIS.so (and libKSC,libGB,libCNS) are
> >`-Wl,-soname,$(@F)' only, however others (such as EUC-JP.so) are
> >`-Wl,-rpath,'$$ORIGIN''.  When we checked same-gnome with strace,
> >it find "EUC-JP.so", but failed to find "libJIS.so".  So, it might be
> >fixed by adding -rpath,'$$ORIGIN' for LDFLAGS for libJIS.so,libKSC.so,
> >libGB.so and libCNS.so, but I've not yet checked it.

If setgid application start running, ld.so doesn't expand the $ORIGIN,
and applying to the name 'as it is' for the location of libJIS.so. it 
is easy to observe using 'strace'. (Note that LANG environment are
ja_JP.ujis).

I changed Makefile as same as described above, and tested,
but the result is the same badly.

> This solution was proposed in a separate message:
> >Subject: Bug#48120: $ORIGIN and setuid/setgid
> >Reply-To: Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>,
> >   48120-maintonly@bugs.debian.org
> >To: 48120-maintonly@bugs.debian.org
> >From: Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>
> >Date: 29 Oct 1999 17:21:03 +0900
> >
> >I found this bug report in BTS.  I hope this problem can be
> >fixed by replacing '$$ORIGIN' with $(gconvdir) in the
> >Makefile, or adding another rpath option with $(gconvdir).
> >
> >Because $ORIGIN in rpath is expanded by glibc 2.1.2 only if
> >non-setuid and non-setgid, use of $ORIGIN is not appropriate
> >in this case.
> >
> >Omitting $ORIGIN in rpath will not be a problem until
> >someone copies those modules and tries to replace underlying
> >libraries with his own versions, I hope.

I think that this method that replace '$$ORIGIN' with $(gnocdir)
is not a good idea because it is only 'quick hack', and be hidden
latent problem. But adding another rpath is considerable.

Regards,
--
GOTO Masanori
Department of Computational Intelligence and Systems Science,
Tokyo Institute of Technology.

Message #15 received at 48120-forwarded@bugs.debian.org (full text, mbox, reply):

From: Ulrich Drepper <drepper@cygnus.com>

To: Joel Klecker <espy@debian.org>

Cc: libc-alpha@sourceware.cygnus.com, Fumitoshi UKAI <ukai@debian.or.jp>, Kaz Sasayama <Kaz.Sasayama@hypercore.co.jp>, 48120-forwarded@bugs.debian.org

Subject: Re: Fwd: Bug#48120: gconv-modules would not be loaded properly when setgid

Date: 09 Nov 1999 19:28:02 -0800

Should be fixed now, in 2.3 as well as 2.2.

-- 
---------------.      drepper at gnu.org  ,-.   1325 Chesapeake Terrace
Ulrich Drepper  \    ,-------------------'   \  Sunnyvale, CA 94089 USA
Cygnus Solutions `--' drepper at cygnus.com   `------------------------

Message #20 received at 48120-close@bugs.debian.org (full text, mbox, reply):

From: Joel Klecker <debian-glibc@lists.debian.org>

To: 48120-close@bugs.debian.org

Subject: Bug#48120: fixed in glibc 2.1.2-11

Date: 28 Dec 1999 19:54:40 -0000

We believe that the bug you reported is fixed in the latest version of
glibc, which has been installed in the Debian FTP archive:
libc6_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/base/libc6_2.1.2-11.deb
  replacing libc6_2.1.2-8.deb
locales_2.1.2-11_all.deb
  to dists/potato/main/binary-all/admin/locales_2.1.2-11.deb
  replacing locales_2.1.2-10.deb
gconv-modules_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/libs/gconv-modules_2.1.2-11.deb
  replacing gconv-modules_2.1.2-8.deb
glibc-doc_2.1.2-11_all.deb
  to dists/potato/main/binary-all/doc/glibc-doc_2.1.2-11.deb
  replacing glibc-doc_2.1.2-10.deb
libc6-prof_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/devel/libc6-prof_2.1.2-11.deb
  replacing libc6-prof_2.1.2-8.deb
libc6-bin_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/utils/libc6-bin_2.1.2-11.deb
glibc_2.1.2-11.diff.gz
  to dists/potato/main/source/libs/glibc_2.1.2-11.diff.gz
  replacing glibc_2.1.2-10.diff.gz
nscd_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/admin/nscd_2.1.2-11.deb
  replacing nscd_2.1.2-8.deb
glibc_2.1.2-11.dsc
  to dists/potato/main/source/libs/glibc_2.1.2-11.dsc
  replacing glibc_2.1.2-10.dsc
libc6-pic_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/devel/libc6-pic_2.1.2-11.deb
  replacing libc6-pic_2.1.2-8.deb
i18ndata_2.1.2-11_all.deb
  to dists/potato/main/binary-all/admin/i18ndata_2.1.2-11.deb
libc6-dbg_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/devel/libc6-dbg_2.1.2-11.deb
  replacing libc6-dbg_2.1.2-8.deb
libc6-dev_2.1.2-11_sparc.deb
  to dists/potato/main/binary-sparc/devel/libc6-dev_2.1.2-11.deb
  replacing libc6-dev_2.1.2-8.deb

Note that this package is not part of the released stable Debian
distribution.  It may have dependencies on other unreleased software,
or other instabilities.  Please take care if you wish to install it.
The update will eventually make its way into the next released Debian
distribution.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 48120@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Joel Klecker <debian-glibc@lists.debian.org> (supplier of updated glibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.6
Date: Sat, 25 Dec 1999 09:54:29 -0800
Source: glibc
Binary: gconv-modules locales libc0.2-dbg glibc-doc nscd libc6.1-dbg libc0.2 libc6-dbg libnss1-compat libc0.2-prof libc6.1 libc6 libc0.2-bin libc0.2-pic libc6.1-prof libc6-prof libc6.1-bin libc6-bin libc0.2-dev libc6.1-pic libc6-pic i18ndata libc6.1-dev libc6-dev
Architecture: source all sparc
Version: 2.1.2-11
Distribution: unstable
Urgency: low
Maintainer: Joel Klecker <debian-glibc@lists.debian.org>
Description: 
 gconv-modules - GNU C Library: Codeset conversion modules
 glibc-doc  - GNU C Library: Documentation
 i18ndata   - GNU C Library: National Language (locale) data [source]
 libc6      - GNU C Library: Shared libraries and Timezone data
 libc6-bin  - GNU C Library: User Programs.
 libc6-dbg  - GNU C Library: Libraries with debugging symbols
 libc6-dev  - GNU C Library: Development Libraries and Header Files.
 libc6-pic  - GNU C Library: PIC archive library
 libc6-prof - GNU C Library: Profiling Libraries.
 locales    - GNU C Library: National Language (locale) data [binary]
 nscd       - GNU C Library: Name Service Cache Daemon
Closes: 48120 50311 50341 52195
Changes: 
 glibc (2.1.2-11) unstable; urgency=low
 .
   * The "If it ain't broke, you're not tryin'" release.
   * Split out $(libc)-bin and libnss1-compat.
   * Split debian/rules into debian/package-rules/*.
     $(libc-bin):
       - Install db_* programs as glibcdb_*.
       - Move zic, zdump, locale, localedef, getent here.
       - Use alternatives for db_*. (closes:Bug#50311,#50341)
   * debian/mk/rules-* -> debian/rules.d/*.
   * debian/<pkg> now resembles $(tmpdir) tree for <pkg>.
   * Improve setperms rule, so debian/perms can specify fewer files.
   * New source unpacking system, see prep.sh.
   * Remove devpts.sh, the init script is now in sysvinit.
   * Improve debian/libc/DEBIAN/shlibs rule (debian/rules.d/shlibs.mk).
   * debian/sysdeps/soname.mk: Bump shlib_depend.
   * Add sysdeps files for $(DEB_HOST_GNU_CPU).
   * Add debian/patches/glibc-mega.dpatch:
     Selected patches from CVS (closes:Bug#48120,#52195).
   * Add debian/patches/linuxthreads-mega.dpatch:
     Selected patches from CVS.
   * Add debian/patches/alpha-pt-machine.h.dpatch:
     Fix pt-machine.h so that linuxthreads compiles on Alpha.
   * Add debian/patches/db2-alpha-powerpc-mutex.dpatch:
     Alpha and PowerPC implementations for db2 spinlocks.
     (patches by David Huggins-Daines <dhd@debian.org>)
     (db2 patch slightly modified)
   * Add debian/patches/powerpc-plt.dpatch:
     1999-10-07  Geoffrey Keating  <geoffk@cygnus.com>
       * sysdeps/powerpc/dl-machine.c: Many minor formatting changes.
         (OPCODE_LWZU): New macro.
         (OPCODE_ADDIS_HI): New macro.
         (OPCODE_LIS_HI): New macro.
         (__elf_machine_runtime_setup): Change PLT code-generation scheme
         for thread safety even with very large PLTs, better efficiency,
         and to fix a cache-flushing bug.
         (__elf_machine_fixup_plt): Likewise.
         (__process_machine_rela): Don't use elf_machine_fixup_plt.
   * Add debian/patches/sparc64-linux-lib64.dpatch:
     Use /lib/64 and /usr/lib/64 instead of /lib64 and /usr/lib64.
   * Add debian/patches/sparc64-linux-execve.dpatch:
     Add __syscall_execve to sparc64 syscalls.list.
   * Add automatic parallel build support for SMP systems.
   * Fix broken parsing of DEB_BUILD_OPTIONS.
   * Add framework to build libc6-64 and libc6-64-dev packages for sparc
     (not enabled for potato).
   * Split locales into `locales' and `i18ndata'.
Files: 
 5a4aea722dbcda10f77c103ba679b8f5 1086 libs required glibc_2.1.2-11.dsc
 64c6569c6adaeb34ae231137946a182d 403814 libs required glibc_2.1.2-11.diff.gz
 ff444dc115358173ce459e8bec2788c9 1245412 base required libc6_2.1.2-11_sparc.deb
 a60cc8f895f521b7bc3ba65f1b78663b 184202 utils standard libc6-bin_2.1.2-11_sparc.deb
 20f742a9cafe0051478e28cfee632706 567184 libs standard gconv-modules_2.1.2-11_sparc.deb
 d138ba85b65f48b77919cf78fce9a8fe 2273886 devel standard libc6-dev_2.1.2-11_sparc.deb
 d470b292f4a6e31220333cf2d24c3534 1058160 devel extra libc6-prof_2.1.2-11_sparc.deb
 31ffa1af5bf2dc606ebc37f97ccf07ad 2447952 devel extra libc6-dbg_2.1.2-11_sparc.deb
 379d2f5ea839d0a31a9243c5c0fe902e 750242 devel extra libc6-pic_2.1.2-11_sparc.deb
 3042ec28e7d3340a65f4d3330516f097 41218 admin optional nscd_2.1.2-11_sparc.deb
 b13baac58c7c7914e2b43d326417713a 1081686 admin standard locales_2.1.2-11_all.deb
 6b52fbd68312805b38f7c8ca276caed2 1020534 admin extra i18ndata_2.1.2-11_all.deb
 f3f60eaf2239a9e8f8f78f3f143bf9e3 2384948 doc optional glibc-doc_2.1.2-11_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEUEARECAAYFAjhmYv0ACgkQRJMoLFuwjIaVLACdEi/o6gNZPATzdnJpK50m37Au
7EoAlAizrFS98iSomgOerjDt02pENRw=
=qO9Z
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.