Bug 244455 - Add NSS' signed libraries to prelink's global blacklist
Summary: Add NSS' signed libraries to prelink's global blacklist
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: nss
Version: 8
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Kai Engert (:kaie) (inactive account)
QA Contact:
URL:
Whiteboard: bzcl34nup
Depends On: 244452
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-06-15 19:19 UTC by Kai Engert (:kaie) (inactive account)
Modified: 2008-04-04 18:17 UTC (History)
2 users (show)

Fixed In Version: 3.11.7-10
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-04-04 18:17:58 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
Patch v1 (2.32 KB, patch)
2007-10-10 00:58 UTC, Kai Engert (:kaie) (inactive account)
no flags Details | Diff

Description Kai Engert (:kaie) (inactive account) 2007-06-15 19:19:17 UTC
Description of problem:

NSS has some libraries that must not be modified by prelink, or its internal
integrity test fails.

We already implemented a patch that decouples these NSS libraries from the
static link chain. However, there might still be applications that linked with
these libraries in the past (or by accident?).

We therefore want to assure that prelink never modifies them and add them to
prelink's blacklist.

As a first step, the NSS package will add the entries to prelink.conf in the
%post installation step. But this is fragile.


Once bug 244452 got fixed, NSS shall ship the blacklist entries in a new file in
/etc/prelink.conf.d/

Comment 1 Kai Engert (:kaie) (inactive account) 2007-10-10 00:58:35 UTC
Created attachment 222051 [details]
Patch v1

Now that Jakub has implemented bug 244452, I plan to add this patch to the NSS
package in Rawhide tomorrow.

Comment 2 Bug Zapper 2008-04-04 12:49:39 UTC
Based on the date this bug was created, it appears to have been reported
during the development of Fedora 8. In order to refocus our efforts as
a project we are changing the version of this bug to '8'.

If this bug still exists in rawhide, please change the version back to
rawhide.
(If you're unable to change the bug's version, add a comment to the bug
and someone will change it for you.)

Thanks for your help and we apologize for the interruption.

The process we're following is outlined here:
http://fedoraproject.org/wiki/BugZappers/F9CleanUp

We will be following the process here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping to ensure this
doesn't happen again.

Comment 3 Kai Engert (:kaie) (inactive account) 2008-04-04 18:17:58 UTC
I had fixed this as mentioned earlier.



Note You need to log in before you can comment on or make changes to this bug.