[SSSD] [PATCH] IPA: explicitly link libsss_ipa with selinux library

Jakub Hrozek jhrozek at redhat.com
Mon Feb 17 16:59:33 UTC 2014


On Fri, Feb 14, 2014 at 11:55:48AM +0100, Pavel Březina wrote:
> On 02/12/2014 09:37 PM, Lukas Slebodnik wrote:
> >ehlo,
> >
> >dlopen test failed when I was testing patches for krb5 CFLAGS with custom build
> >of MIT kerberos.
> >
> >sh-4.2$ ./dlopen-tests
> >Running suite(s): dlopen
> >0%: Checks: 1, Failures: 1, Errors: 0
> >src/tests/dlopen-tests.c:129:F:dlopen:test_dlopen_base:0:
> >  Error opening libsss_ipa.so: [dlopen() failed: ./sssd/.libs/libsss_ipa.so:
> >  undefined symbol: selinux_policy_root].
> >
> >
> >Function selinux_policy_root is used in the module ipa_selinux.c
> >by macro selogin_path,
> >
> >sh-4.2$ objdump -T /usr/lib64/sssd/libsss_ipa.so | grep selinux_policy_root
> >0000000000000000      D  *UND*  0000000000000000            selinux_policy_root
> >
> >
> >
> >But libsss_ipa.so was not linked with selinux library
> >It was not problem because another libraries depens on selinux.so
> >libsss_ipa.so -> libk5crypto.so -> libkrb5support.so -> libselinux.so
> >We should not rely on dependencies of other libraries.
> >
> >
> >Before patch:
> >sh-4.2$ objdump -p /usr/lib64/sssd/libsss_ipa.so | grep selinux
> >
> >After patch:
> >sh-4.2$ objdump -p /usr/lib64/sssd/libsss_ipa.so | grep selinux
> >   NEEDED               libselinux.so.1
> >
> >The simple patch is attached.
> >
> >LS
> 
> Ack.

Pushed to master.



More information about the sssd-devel mailing list