Re: Introducing the hardening-wrapper package (was: Exim4 problems)

[Svante Signell]

On Mon, 2011-05-30 at 22:54 +0200, Samuel Thibault wrote:
> Svante Signell, le Mon 30 May 2011 22:51:07 +0200, a écrit :
> > On Tue, 2011-05-24 at 19:30 +0200, Svante Signell wrote:
> > > On Mon, 2011-05-23 at 23:48 +0200, Samuel Thibault wrote:
> > > > #624696 - exim4: broken build with gcc-4.6
> > > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624696
> > > > 
> > > > #624743 - gcc-4.6 -D_FORTIFY_SOURCE=2 miscompiles exim4
> > > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624743
> > > > 
> > > > I'll follow-up there.
> > > 
> > > Confirmed that exim4 builds OK with libc0.3-2.13-4 (and libc0.3-dev) and
> > > gcc-4:4.6.0-5 with -g -O2 due this __restrict bug being fixed.
> > 
> > exim4-4.76-2 also builds with the patched libc0.3 (2.13-5~r4686+jk2) and
> > hurd (20110519-2~jk4) by Jeremie. Why does it fail on the buildd?
> 
> Possibly because it's in a chroot.

From the build log:

Chroot Build
Dir: /home/buildd/build/chroot-sid/build/buildd-exim4_4.76-2-hurd-i386-IUsCPu
...
running minimal functionality test for binary
build-tree/build-exim4-daemon-light/exim in
directory /build/buildd-exim4_4.76-2-hurd-i386-IUsCPu/exim4-4.76/test

2011-05-29 18:18:49 failed to open configuration file
/build/buildd-exim4_4.76-2-hurd-i386-IUsCPu/exim4-4.76/test/eximtest/exim4.conf:
 Permission denied (euid=60000 egid=107)
...

Looks like the test file is inside the chroot directory, or
is /build/buildd/... absolute?

However, it looks like chroot accepts options for user and group via:
(if the same chroot command is used at buildds, cannot find out from the
log file)

--userspec=USER:GROUP
     specify user and group (ID or name) to use

--groups=G_LIST
     specify supplementary groups as g1,g2,..,gN