Bug 382091
Summary: | rawhide rpm breaks livecd-creator | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Craig Schlenter <craig> |
Component: | rpm | Assignee: | Panu Matilainen <pmatilai> |
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | lkundrak, pnasrat, tmraz |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | i386 | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2007-11-15 10:00:45 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Craig Schlenter
2007-11-14 10:37:56 UTC
Likely an initial "side-effect" from the beecrypt -> nss switch... This is caused by too late init of NSS when the calling process is already in chroot. I call it in the rpmDigestInit in the current patch version. Panu, do you have some ideas, where we should put it in? Hmm, according to http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslfnc.html#1234224 NSS_NoDB_Init() should only be called once whereas rpmDigestInit() gets called any number of times from rpmlib. To ensure it gets called always, early on and just once, the place to put it (directly or via some rpmInitCrypto() or such call) would be rpmReadConfigFiles() in lib/rpmrc.c, and even there it's better to protect it with a static nss_initialized flag to ensure it never gets called twice within a process lifetime. BTW the NSS_NoDB_Init() documentation also says PR_Init() must be called first, but PR_Init() documentation says it's only necessary in some specific cases .. dunno what to make of that. I think the docs aren't too current because in the source code of NSS_NoDB_Init() there is clear that it is guarded by a flag so it should be safe to call it many times. Also the PR_Init is really not necessary in our case. *** Bug 382251 has been marked as a duplicate of this bug. *** Ok, initializing nss from rpmReadConfigFiles() indeed fixes this, patch to follow shortly... Should be fixed in rpm-4.4.2.2-10.fc9. Thanks for debugging Tomas! |