Bug 2215176

Summary: /sbin/ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 is not a symbolic link
Product: Red Hat Enterprise Linux 8 Reporter: Alex Jia <ajia>
Component: llvmAssignee: Tom Stellard <tstellar>
Status: NEW --- QA Contact: qe-baseos-tools-bugs
Severity: high Docs Contact:
Priority: high    
Version: 8.9CC: jchecahi, jligon, jnovy, lsm5, mprchlik, sipoyare, talk.centos
Target Milestone: rcKeywords: Reopened, Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-06-15 05:54:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 1 Jindrich Novy 2023-06-15 05:44:28 UTC
Hi Alex,

/usr/lib64/llvm15/lib/libclang.so.15 is a llvm library not owned by container-tools. Assuming something were wrong with your test box installation given the dynamic linker failure? Are you able to reproduce it again?

Thanks,
Jindrich

Comment 2 Alex Jia 2023-06-15 05:54:48 UTC
(In reply to Jindrich Novy from comment #1)
> Hi Alex,
> 
> /usr/lib64/llvm15/lib/libclang.so.15 is a llvm library not owned by
> container-tools. Assuming something were wrong with your test box
> installation given the dynamic linker failure? Are you able to reproduce it
> again?
> 
> Thanks,
> Jindrich

I gave a try on fresh host, it works well this time.

Comment 3 Alex Jia 2023-06-15 06:34:25 UTC
[root@kvm-01-guest04 ~]# yum install llvm-compat-libs
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:04:56 ago on Thu 15 Jun 2023 01:51:36 AM EDT.
Dependencies resolved.
==============================================================================================================================================================================================================================================
 Package                                               Architecture                                Version                                                                        Repository                                             Size
==============================================================================================================================================================================================================================================
Installing:
 llvm-compat-libs                                      x86_64                                      15.0.7-1.module+el8.9.0+18822+caf59f8a                                         beaker-AppStream                                       59 M
Enabling module streams:
 llvm-toolset                                                                                      rhel8                                                                                                                                     

Transaction Summary
==============================================================================================================================================================================================================================================
Install  1 Package

Total download size: 59 M
Installed size: 220 M
Is this ok [y/N]: y
Downloading Packages:
llvm-compat-libs-15.0.7-1.module+el8.9.0+18822+caf59f8a.x86_64.rpm                                                                                                                                             73 MB/s |  59 MB     00:00    
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                          73 MB/s |  59 MB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                                                                      1/1 
  Installing       : llvm-compat-libs-15.0.7-1.module+el8.9.0+18822+caf59f8a.x86_64                                                                                                                                                       1/1 
  Running scriptlet: llvm-compat-libs-15.0.7-1.module+el8.9.0+18822+caf59f8a.x86_64                                                                                                                                                       1/1 
/sbin/ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 is not a symbolic link


/sbin/ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 is not a symbolic link


  Verifying        : llvm-compat-libs-15.0.7-1.module+el8.9.0+18822+caf59f8a.x86_64                                                                                                                                                       1/1 
Installed products updated.

Installed:
  llvm-compat-libs-15.0.7-1.module+el8.9.0+18822+caf59f8a.x86_64

Comment 6 Peter Heirich 2023-06-29 12:42:15 UTC
exists in centos 8 stream too.

root@foxtrot452:/usr/lib64/llvm15/lib# ldconfig
ldconfig: /usr/lib64/llvm15/lib/libclang.so.15 ist kein symbolischer Link

root@foxtrot452:/usr/lib64/llvm15/lib# dnf list --installed | grep llvm
llvm-compat-libs.x86_64                            15.0.7-1.module_el8+399+c714bfd2                      @appstream

in .rpm are both files and they differs, even they have the same size. get fresh from mirror:

-rw-r--r--   1 root     root           23 May 10 04:13 ./etc/ld.so.conf.d/llvm-compat-x86_64.conf
drwxr-xr-x   1 root     root            0 May 10 04:24 ./usr/lib/.build-id
drwxr-xr-x   1 root     root            0 May 10 04:24 ./usr/lib/.build-id/5a
lrwxrwxrwx   1 root     root           51 May 10 04:24 ./usr/lib/.build-id/5a/992599273fc8b3b5f8b5e078e1ad890c39a44d -> ../../../..
drwxr-xr-x   1 root     root            0 May 10 04:24 ./usr/lib/.build-id/d6
lrwxrwxrwx   1 root     root           46 May 10 04:24 ./usr/lib/.build-id/d6/a505e238e0623b1c7330eef9bac6c4561bfe3c -> ../../../..
drwxr-xr-x   1 root     root            0 May 10 04:24 ./usr/lib/.build-id/ed
lrwxrwxrwx   1 root     root           47 May 10 04:24 ./usr/lib/.build-id/ed/f1a07ab6da413bd104addc6bc8e5b674915bf4 -> ../../../..
lrwxrwxrwx   1 root     root           51 May 10 04:24 ./usr/lib/.build-id/ed/f1a07ab6da413bd104addc6bc8e5b674915bf4.1 -> ../../../
-rwxr-xr-x   1 root     root     104564904 May 10 04:19 ./usr/lib64/llvm15/lib/libLLVM-15.so
-rwxr-xr-x   1 root     root     61481992 May 10 04:18 ./usr/lib64/llvm15/lib/libclang-cpp.so.15
-rwxr-xr-x   1 root     root     32108032 May 10 04:24 ./usr/lib64/llvm15/lib/libclang.so.15
-rwxr-xr-x   1 root     root     32108032 May 10 04:24 ./usr/lib64/llvm15/lib/libclang.so.15.0.7

root@foxtrot452:~/testdir# ls -l
insgesamt 65152
-rwxr-xr-x. 1 root root 32108032 29. Jun 14:34 libclang.so.15
-rwxr-xr-x. 1 root root 32108032 29. Jun 14:34 libclang.so.15.0.7

root@foxtrot452:~/testdir# cmp *
libclang.so.15 libclang.so.15.0.7 sind verschieden: Byte 31511027, Zeile 62565

1|root@foxtrot452:~/testdir#

Should be a symlink or at least same content. Maybe infected ?

Hide some code like a root-kit in so.15, but use code from so.15.0.7 for normal function to do the job.

regards 
Peter