Bug 2238038 - Please resolve conflict with checksec package
Summary: Please resolve conflict with checksec package
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: python-pwntools
Version: rawhide
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: W. Michael Petullo
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-09-08 17:17 UTC by Vít Ondruch
Modified: 2023-10-04 21:08 UTC (History)
5 users (show)

Fixed In Version: python-pwntools-4.9.0-5.fc39
Clone Of:
Environment:
Last Closed: 2023-09-15 18:56:55 UTC
Type: ---
Embargoed:
yanqiyu01: needinfo-


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 2235760 0 unspecified CLOSED fortify check does not work with Fedora binutils-2.41-1.fc40 and above on ppc64le 2023-10-04 21:08:13 UTC

Internal Links: 2235760

Description Vít Ondruch 2023-09-08 17:17:19 UTC
python-pwntools duplicates executable, which is already provided by checksec package:

~~~
$ sudo dnf4 repoquery -f /usr/bin/checksec
Last metadata expiration check: 0:11:21 ago on Pá 8. září 2023, 19:01:34.
checksec-0:2.6.0-4.fc39.noarch
python3-pwntools-0:4.9.0-4.fc39.noarch
~~~

This is not nice, please resolve the conflict.

Reproducible: Always

Comment 1 Vít Ondruch 2023-09-08 17:18:54 UTC
@yanqiyu01 FYI

Comment 2 Jun Aruga 2023-09-08 19:18:55 UTC
Related to this issue, I see the `%{_bindir}/*` in the %files section in the python-pwntools.spec file.
https://src.fedoraproject.org/rpms/python-pwntools/blob/rawhide/f/python-pwntools.spec#_68

```
%files -n python3-%{srcname}
...
%{_bindir}/*
```

However, I think you should list up the execution files in the %{_bindir} directory explicitly, rather than using the wildcard. I think the reason is to avoid the unintentional conflict from another package like this issue.

https://docs.fedoraproject.org/en-US/packaging-guidelines/#_explicit_lists
> Explicit lists
>
> Packagers SHOULD NOT simply glob everything under a shared directory.
> In particular, the following SHOULD NOT be used in %files:
> * %{_bindir}/*

So, I think the possible solution to fix this issue is list up the binary files explicitly, renaming the `checksec` to something like `pwntools-checksec`.

Comment 3 Fedora Update System 2023-09-10 00:02:05 UTC
FEDORA-2023-d9788066ce has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-d9788066ce

Comment 4 Fedora Update System 2023-09-10 01:51:54 UTC
FEDORA-2023-d9788066ce has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-d9788066ce`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d9788066ce

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2023-09-15 18:56:55 UTC
FEDORA-2023-d9788066ce has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.