Bug 1142153
| Summary: | *policy.jar files should be repacked to not include version and timestamp | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | jiri vanek <jvanek> |
| Component: | java-1.8.0-openjdk | Assignee: | jiri vanek <jvanek> |
| Status: | CLOSED EOL | QA Contact: | Lukáš Zachar <lzachar> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 22 | CC: | ahughes, dbhole, jpokorny, jvanek, omajid, philip |
| Target Milestone: | --- | Keywords: | Reopened |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-07-19 12:08:21 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
jiri vanek
2014-09-16 09:14:03 UTC
something like this:
#!/bin/sh
M=META-INF/MANIFEST.MF
for f in local_policy.jar US_export_policy.jar ; do
echo "processing $f"
d=`mktemp -d`
pushd $d
jar xf /usr/lib/jvm/java/jre/lib/security/$f
cat $M
sed -i "s/Created-By.*/Created-By: 1.7.0/g" $M
cat $M
find . -exec touch -t 201401010000 {} +
zip -rX $f *
md5sum $f
sha256sum $f
popd
done
can be torepack policies?
Equivalent IcedTea bug for 7: http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2009 note: This have been pushed to icedtea7-forest head and 2.5 so "fixed upstream" for jdk7 jdk8 still no way, going with spec patches: f20-f23: http://pkgs.fedoraproject.org/cgit/java-1.8.0-openjdk.git/commit/?id=fb001ce997e7fc95c1eeca02d3ed004dc59035a1 Jiří, is this supposed to silence following "yum update" warnings I just got when updating: java-1.8.0-openjdk-headless.x86_64 1:1.8.0.40-21.b25.fc21 to java-1.8.0-openjdk-headless.x86_64 1:1.8.0.40-24.b25.fc21 I am asking as I got this warning: > Cleanup : 1:java-1.8.0-openjdk-headless-1.8.0.40-21.b25.fc21.x86_64 > warning: > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.40-21.b25.fc21.x86_64/jre/lib/security/local_policy.jar > saved as > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.40-21.b25.fc21.x86_64/jre/lib/security/local_policy.jar.rpmsave > warning: > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.40-21.b25.fc21.x86_64/jre/lib/security/US_export_policy.jar > saved as > /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.40-21.b25.fc21.x86_64/jre/lib/security/US_export_policy.jar.rpmsave IIUIC, the referred patch was introduced in -20.b25 build. It means that the patch should definitely play its role for both original package and the one being installed as an update. So, am I hitting this issue, [bug 1141443] or something else? Yes it will fix the issu eyou ar emntioning. The fix is in u45. So *next* update will finally stop complaining. I am not sure about the previous statement, but unfortunately any evidence is lost (closed the respective terminal since then and /var/log/yum.log doesn't appear to track the error messages from the RPM scriptlets), except for: $ cd /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-31.b13.fc21.x86_64 $ ls jre/lib/security/local_policy.jar* local_policy.jar local_policy.jar.rpmnew So it still seems to be quite the same. yes. timestamp went wrong. Still observed:
# yum update -y
> [...]
> ---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.45-35.b13.fc21 will be updated
> ---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.45-38.b14.fc21 will be an update
> [...]
> Updating : 1:java-1.8.0-openjdk-headless-1.8.0.45-38.b14.fc21.x86_64 9/426
> warning: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/US_export_policy.jar created as /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/US_export_policy.jar.rpmnew
> warning: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/java.security created as /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/java.security.rpmnew
> warning: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/local_policy.jar created as /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.45-38.b14.fc21.x86_64/jre/lib/security/local_policy.jar.rpmnew
> [...]
Still observed with Fedora 22:
> Jun 23 14:04:25 DEBUG ---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.45-39.b14.fc22 will be upgraded
> Jun 23 14:04:25 DEBUG ---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.45-40.b14.fc22 will be an upgrade
This bug appears to have been reported against 'rawhide' during the Fedora 23 development cycle. Changing version to '23'. (As we did not run this process for some time, it could affect also pre-Fedora 23 development cycle bugs. We are very sorry. It will help us with cleanup during Fedora 23 End Of Life. Thank you.) More information and reason for this action is here: https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora23 Tbh, I dont know what to change. The md5sum is correct, also timestamp is correct. So probably the different path is the key thing and I dont know how to workaround it. Without yum/dnf support it may be impossible. this was resolved. Don't think so:
# dnf -y update
> [...]
> Upgrading : java-1.8.0-openjdk-headless-1:1.8.0.72-1.b15.fc22.x86_64 138/622
> warning:
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.72-1.b15.fc22.x86_64/jre/lib/security/US_export_policy.jar
> created as
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.72-1.b15.fc22.x86_64/jre/lib/security/US_export_policy.jar.rpmnew
> warning:
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.72-1.b15.fc22.x86_64/jre/lib/security/local_policy.jar
> created as
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.72-1.b15.fc22.x86_64/jre/lib/security/local_policy.jar.rpmnew
> [...]
> Cleanup : java-1.8.0-openjdk-1:1.8.0.71-1.b15.fc22.x86_64 526/622
> Cleanup : java-1.8.0-openjdk-headless-1:1.8.0.71-1.b15.fc22.x86_64 527/622
> warning:
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.fc22.x86_64/jre/lib/security/local_policy.jar
> saved as
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.fc22.x86_64/jre/lib/security/local_policy.jar.rpmsave
> warning:
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.fc22.x86_64/jre/lib/security/US_export_policy.jar
> saved as
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.fc22.x86_64/jre/lib/security/US_export_policy.jar.rpmsave
It was fixed since u45 (since then was u51, u71 and u72) http://pkgs.fedoraproject.org/cgit/rpms/java-1.8.0-openjdk.git/tree/java-1.8.0-openjdk.spec?h=f22#n784 http://pkgs.fedoraproject.org/cgit/rpms/java-1.8.0-openjdk.git/tree/java-1.8.0-openjdk.spec?h=f22#n1535 And I'm not encountering the issue since that. I have jsut chekced on clean machine and it is fixed. Have it occured in u51->u71? May you try - to remove all your openjdks, install u71 and update to u72? - to remove all possible invalid /usr/lib/jvm/java-1.8.0-openjdk-* directories? - to remove various /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.*/jre/lib/security/*_policy.jar.* If none of those helped, may you posted md5sums and timestamps of old ones before update and new ones after update? Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed. |