SSSD / sssd

#257 Selinux build failure
Closed: Fixed Opened by mathiaz.

Closed: Fixed
Reopen Issue

Trying to build a snapshot from upstream master, it failed with an error related to selinux - even though selinux headers are installed:

libtool: link: gcc -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Werror-implicit-function-declaration -g -O2 -g -Wall -O2 -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -Wl,-Bsymbolic-functions -o sssd monitor/monitor.o confdb/confdb_setup.o confdb/confdb.o db/sysdb.o db/sysdb_ops.o db/sysdb_search.o monitor/monitor_sbus.o providers/dp_auth_util.o providers/dp_sbus.o sbus/sbus_client.o sbus/sssd_dbus_common.o sbus/sssd_dbus_connection.o sbus/sssd_dbus_server.o util/memory.o util/server.o util/signal.o util/usertools.o util/backup_file.o util/strtonum.o util/check_and_open.o util/files.o util/debug.o  -ltalloc -ltdb -ltevent /usr/lib/libpopt.so -lldb -L/lib -ldbus-1 -lrt -lpcre -L/build/mathiaz/sssd_0.8.0~gitbzr847/common/ini/.libs /build/mathiaz/sssd_0.8.0~gitbzr847/common/ini/.libs/libini_config.a -L/build/mathiaz/sssd_0.8.0~gitbzr847/common/collection/.libs /build/mathiaz/sssd_0.8.0~gitbzr847/common/collection/.libs/libcollection.a -L/build/mathiaz/sssd_0.8.0~gitbzr847/common/dhash/.libs /build/mathiaz/sssd_0.8.0~gitbzr847/common/dhash/.libs/libdhash.a -L/build/mathiaz/sssd_0.8.0~gitbzr847/replace -lreplace ./.libs/libsss_crypt.a -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4 -lplc4 -lnspr4 -lpthread -ldl
util/files.o: In function `reset_selinux_file_context':
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:118: undefined reference to `setfscreatecon'
util/files.o: In function `selinux_file_context':
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:97: undefined reference to `is_selinux_enabled'
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:99: undefined reference to `matchpathcon'
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:105: undefined reference to `setfscreatecon'
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:110: undefined reference to `freecon'
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:100: undefined reference to `security_getenforce'
/build/mathiaz/sssd_0.8.0~gitbzr847/server/util/files.c:106: undefined reference to `security_getenforce'
collect2: ld returned 1 exit status

I've attached the full build log. This has already been reported on the mailing list - with a potential patch attached.

Fields changed

component: SSSD => Build Environment
milestone: => SSSD 1.0 RC
owner: somebody => sgallagh
priority: major => critical
status: new => assigned

It looks like the root of this message is that Ubuntu links with {{{-Wl,-Bsymbolic-functions}}}, which we aren't using in Fedora. This causes the linker to look up all symbols being used by the program at link time and verify whether the executable is overriding anything in the libraries.

The sssd binary is currently linking in files.o, which in turn links in libselinux. However, the sssd itself does not use this object (it's a wasted dependency). It's currently only used by the command line tools.

I will fix the Makefile so that we don't link against this object unless we need to.

Fixed in 198e04f81f26c051037817241918178c01803f52

fixedin: => 1.0.0rc
resolution: => fixed
status: assigned => closed

Sorry, copied the wrong changeset in the comment above. Correct one is: 9d56215d973676130fede91e39ee34d56ca19fb6

Fields changed

rhbz: => 0

Metadata Update from @mathiaz:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.0 RC

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1299

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Low
defect
Build Environment
master
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.