<div dir="ltr"><div dir="ltr">On Sat, Jan 30, 2021 at 11:58 AM Klaus Ziegler - owner of <a href="http://sunfreeware.de">sunfreeware.de</a> <<a href="mailto:klausz@haus-gisela.de">klausz@haus-gisela.de</a>> wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi,<br>
<br>
Solaris10 branded zone support in Openindiana is broken likely since last<br>
year July, because of the following undefined symbol in s10_brand.so.1:<br></blockquote><div><br></div><div>November, when stack smashing protection was added to userland.<br><br><a href="https://www.illumos.org/issues/13274">https://www.illumos.org/issues/13274</a><br><br></div><div>My initial fix in Tribblix, like here, was to roll back the s10_brand pieces to a previous<br>version. The brand code here isn't changing at all.<br><br></div><div>This is a potential fix for illumos-gate:<br><br><a href="https://github.com/tribblix/tribblix-build/blob/master/illumos/s10-brand-ssp.patch">https://github.com/tribblix/tribblix-build/blob/master/illumos/s10-brand-ssp.patch</a><br><br></div><div>(I have a successful build with it, but haven't installed it yet to test it.)<br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
root@myserver:~# zlogin myzone<br>
[Connected to zone 'myzone' pts/2]<br>
ld.so.1: s10_brand.so.1: fatal: relocation error: file <br>
/.SUNWnative/usr/lib/s10_brand.so.1: symbol __stack_chk_guard: <br>
referenced symbol not found<br>
<br>
[Connection to zone 'myzone' pts/2 closed]<br>
<br>
I tried to upgrade my main OI server several times last year, which <br>
always ended<br>
by booting into the previous BE and waiting another month for the next try.<br>
Because this is not a really usefull approach, I went into detail <br>
yesterday and got<br>
the following workaround: mount your previous BE using beadm, copy over<br>
32/64 bit s10_brand.so.1 shared libraries to /usr/lib resp. /usr/lib/64 <br>
and you are<br>
able to use zlogin again.<br>
The zone seems to be running fine directly after "pkg update" but I wasn't<br>
able to log into it using zlogin. To prove this here are the nm outputs <br>
of both<br>
s10_brand.so.1 libraries:<br>
<br>
root@myserver:/usr/lib/64# ls -al s10_brand.so.1*<br>
-rwxr-xr-x 1 root bin 125128 Juni 21 2020 s10_brand.so.1<br>
-rwxr-xr-x 1 root bin 125568 Jan. 29 09:57 <br>
s10_brand.so.1.new_pkg_update<br>
root@myserver:/usr/lib/64# nm s10_brand.so.1 | grep __stack_chk_guard<br>
root@myserver:/usr/lib/64# nm s10_brand.so.1.new_pkg_update | grep <br>
__stack_chk_guard<br>
[318] | 0| 0|OBJT |GLOB |0 |UNDEF <br>
|__stack_chk_guard<br>
<br>
Note: this fix is needed for both 32/64 bit libraries, the 32bit one <br>
re-enables zlogin,<br>
and the 64bit one, for example enables "uptime" inside the <br>
zone again.<br>
<br>
I'm not new to SunOS/OI, but I never filled a bug against OI.<br>
<br>
Regards,<br>
Klaus<br>
<br>
<br>
_______________________________________________<br>
oi-dev mailing list<br>
<a href="mailto:oi-dev@openindiana.org" target="_blank">oi-dev@openindiana.org</a><br>
<a href="https://openindiana.org/mailman/listinfo/oi-dev" rel="noreferrer" target="_blank">https://openindiana.org/mailman/listinfo/oi-dev</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature">-Peter Tribble<br><a href="http://www.petertribble.co.uk/" target="_blank">http://www.petertribble.co.uk/</a> - <a href="http://ptribble.blogspot.com/" target="_blank">http://ptribble.blogspot.com/</a></div></div>