[SSSD] [PATCH] IPA: explicitly link libsss_ipa with selinux library
Pavel Březina
pbrezina at redhat.com
Fri Feb 14 10:55:48 UTC 2014
On 02/12/2014 09:37 PM, Lukas Slebodnik wrote:
> ehlo,
>
> dlopen test failed when I was testing patches for krb5 CFLAGS with custom build
> of MIT kerberos.
>
> sh-4.2$ ./dlopen-tests
> Running suite(s): dlopen
> 0%: Checks: 1, Failures: 1, Errors: 0
> src/tests/dlopen-tests.c:129:F:dlopen:test_dlopen_base:0:
> Error opening libsss_ipa.so: [dlopen() failed: ./sssd/.libs/libsss_ipa.so:
> undefined symbol: selinux_policy_root].
>
>
> Function selinux_policy_root is used in the module ipa_selinux.c
> by macro selogin_path,
>
> sh-4.2$ objdump -T /usr/lib64/sssd/libsss_ipa.so | grep selinux_policy_root
> 0000000000000000 D *UND* 0000000000000000 selinux_policy_root
>
>
>
> But libsss_ipa.so was not linked with selinux library
> It was not problem because another libraries depens on selinux.so
> libsss_ipa.so -> libk5crypto.so -> libkrb5support.so -> libselinux.so
> We should not rely on dependencies of other libraries.
>
>
> Before patch:
> sh-4.2$ objdump -p /usr/lib64/sssd/libsss_ipa.so | grep selinux
>
> After patch:
> sh-4.2$ objdump -p /usr/lib64/sssd/libsss_ipa.so | grep selinux
> NEEDED libselinux.so.1
>
> The simple patch is attached.
>
> LS
Ack.
More information about the sssd-devel
mailing list