Bug 1967565
| Summary: | annocheck failures on bind-libs, aarch64 platform | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Petr Menšík <pemensik> | ||||
| Component: | bind | Assignee: | Petr Menšík <pemensik> | ||||
| Status: | CLOSED WONTFIX | QA Contact: | rhel-cs-infra-services-qe <rhel-cs-infra-services-qe> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | CentOS Stream | CC: | bstinson, jorton, jwboyer | ||||
| Target Milestone: | beta | ||||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2022-12-03 07:27:39 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | 1961686, 1984652 | ||||||
| Bug Blocks: | |||||||
| Attachments: |
|
||||||
|
Description
Petr Menšík
2021-06-03 11:38:14 UTC
Created attachment 1788842 [details]
all failures list
all failures in bind 9.16.15
It might be indeed problem of using libtool, which is used to build bind. It might be fixed by libtool fixed and then just rebuild to scan resulting build. Last build still does not pass annocheck, but there is much less failures. For every shared library it reports on aarch64: branch-protection test because The -mbranch-protection option was not used 1) annocheck 'rhel-policy' test fails for /usr/lib64/libbind9-9.16.20-RH.so on aarch64 Result: VERIFY Waiver Authorization: Not Waivable Details: annocheck: Version 9.90. Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: pie test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: WARN: DW_FORM_GNU_strp_alt not yet handled Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: writeable-got test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: dynamic-segment test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: bind-now test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: info: set binary producer to Gas version 2. Hardened: /usr/lib64/libbind9-9.16.20-RH.so: info: notes produced by assembler plugin version 1 Hardened: /usr/lib64/libbind9-9.16.20-RH.so: info: set binary producer to Gimple version 9. Hardened: /usr/lib64/libbind9-9.16.20-RH.so: info: notes produced by lto plugin version 9.90 Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: stack-prot test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: pic test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: fortify test because LTO compilation discards preprocessor options Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: glibcxx-assertions test because source language not C++ Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: optimization test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: warnings test because LTO compilation discards preprocessor options Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: lto test because LTO compilation detected Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: stack-clash test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: gnu-stack test because stack segment exists with the correct permissions Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: gnu-relro test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: notes test because no gaps found Hardened: /usr/lib64/libbind9-9.16.20-RH.so: FAIL: branch-protection test because The -mbranch-protection option was not used Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: cf-protection test because not an x86 executable Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: entry test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: go-revision test because no GO compiled code found Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: only-go test because not compiled for x86 Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: production test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: run-path test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: rwx-seg test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: short-enum test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: skip: stack-realign test because not an x86 executable Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: textrel test Hardened: /usr/lib64/libbind9-9.16.20-RH.so: PASS: threads test Suggested Remedy: See annocheck(1) for more information. ... 4) annocheck 'rhel-policy' test fails for /usr/lib64/libisc-9.16.20-RH.so on aarch64 Result: VERIFY Waiver Authorization: Not Waivable Details: annocheck: Version 9.90. Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: pie test Hardened: /usr/lib64/libisc-9.16.20-RH.so: WARN: DW_FORM_GNU_strp_alt not yet handled Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: writeable-got test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: dynamic-segment test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: bind-now test Hardened: /usr/lib64/libisc-9.16.20-RH.so: info: set binary producer to Gas version 2. Hardened: /usr/lib64/libisc-9.16.20-RH.so: info: notes produced by assembler plugin version 1 Hardened: /usr/lib64/libisc-9.16.20-RH.so: info: set binary producer to Gimple version 9. Hardened: /usr/lib64/libisc-9.16.20-RH.so: info: notes produced by lto plugin version 9.90 Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: stack-prot test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: pic test Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: fortify test because LTO compilation discards preprocessor options Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: glibcxx-assertions test because source language not C++ Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: optimization test Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: warnings test because LTO compilation discards preprocessor options Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: lto test because LTO compilation detected Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: stack-clash test Hardened: /usr/lib64/libisc-9.16.20-RH.so: FAIL: branch-protection test because not enabled (function: isc__shutdown) Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: gnu-stack test because stack segment exists with the correct permissions Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: gnu-relro test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: notes test because no gaps found Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: cf-protection test because not an x86 executable Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: entry test Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: go-revision test because no GO compiled code found Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: only-go test because not compiled for x86 Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: production test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: run-path test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: rwx-seg test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: short-enum test Hardened: /usr/lib64/libisc-9.16.20-RH.so: skip: stack-realign test because not an x86 executable Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: textrel test Hardened: /usr/lib64/libisc-9.16.20-RH.so: PASS: threads test Suggested Remedy: See annocheck(1) for more information. I am sure BIND is passing flags as good as it is able to. But still some annobin checks fail. This change seems to be introduced outside of my package and would be probably solved somewhere else too. Would keep the bug open until it can pass gating tests without waiving, but I doubt I can improve anything on my side. After evaluating this issue, there are no plans to address it further or fix it in an upcoming release. Therefore, it is being closed. If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened. |