RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1263721 - krb5-config returns wrong -specs path - follow up bug
Summary: krb5-config returns wrong -specs path - follow up bug
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: krb5
Version: 7.2
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: rc
: ---
Assignee: Robbie Harwood
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-09-16 13:55 UTC by Patrik Kis
Modified: 2015-10-21 20:08 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 1247751
Environment:
Last Closed: 2015-10-21 20:08:19 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1247751 0 unspecified CLOSED krb5-config returns wrong -specs path 2021-02-22 00:41:40 UTC

Internal Links: 1247751

Description Patrik Kis 2015-09-16 13:55:05 UTC 
This is a follow up bug for bug 1247751.

Just a short summary what was the original problem observed in Fedora:
+---------------------------------------------------------------------------+
Description of problem:
krb5-config returns wrong hardening paths (missing /usr/lib/)

Version-Release number of selected component (if applicable):
krb5-devel-1.13.1-2.fc23

How reproducible:
deterministic

Steps to Reproduce:
# /usr/bin/krb5-config --libs

Actual results:
-specs=/rpm/redhat/redhat-hardened-ld -lkrb5 -lk5crypto -lcom_err

Expected results:
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld -lkrb5 -lk5crypto -lcom_err
+---------------------------------------------------------------------------+


Description of the new problem:
The reported issue can not be reproduced on RHEL.
The build krb5-1.13.2-10.el7 was rebuilt with fix removed from the spec file, but the issue still not presented.
The fix removed was:
------------
# FIXME: Temporay workaround for RH bug #1204646 ("krb5-config
# returns wrong -specs path") so that development of krb5
# dependicies gets unstuck.
sed -r -i -e "s/-specs=\/.+?\/redhat-hardened-ld//g" $RPM_BUILD_ROOT%{_bindir}/krb5-config

if [[ "$(< $RPM_BUILD_ROOT%{_bindir}/krb5-config )" == *redhat-hardened-ld* ]] ; then
       printf '# redhat-hardened-ld for krb5-config failed' 1>&2
       exit 1
fi
------------

The same happened when krb5-1.13.1-2.el7 was rebuilt with removed "fix". The issue did not appeared and krb5-config did not displayed -specs=
The following example is with rebuilt 1.13.1-2.el7, where the "fix" was removed from the spec file:

# rpm -q krb5-devel
krb5-devel-1.13.1-99.el7.x86_64
# krb5-config --libs
-lkrb5 -lk5crypto -lcom_err


So, is this "fix" needed for RHEL at all? Or am I missing something?
Comment 1 Robbie Harwood 2015-09-17 19:36:17 UTC 
The way krb5-config works involves capturing the buildflags to CC and then running a series of `sed` invocations on them.  It's ugly, gross, and it's why upstream wants to move to pkg-config.

All that is to say - I'm not surprised it broke in one environment and not the other.  Unfortunately, rmainz wrote that fix, not me, so I can't say for sure whether the problem that solves is general or Fedora-specific.

I'm inclined to think it's probably not needed, but if it doesn't actually break anything I'd prefer to keep the two spec files in sync.
Comment 2 Patrik Kis 2015-09-18 07:44:20 UTC 
(In reply to Robbie Harwood from comment #1)
> 
> I'm inclined to think it's probably not needed, but if it doesn't actually
> break anything I'd prefer to keep the two spec files in sync.

It's probably not breaking anything and if you think it makes sense to keep it there, I won't object. Having synced spec files between Fedora and RHEL is indeed a good argument.
Note You need to log in before you can comment on or make changes to this bug.