[oi-dev] brand10 support broken in OI

[Peter Tribble]

On Sat, Jan 30, 2021 at 11:58 AM Klaus Ziegler - owner of sunfreeware.de <
klausz at haus-gisela.de> wrote:

> Hi,
>
> Solaris10 branded zone support in Openindiana is broken likely since last
> year July, because of the following undefined symbol in s10_brand.so.1:
>

November, when stack smashing protection was added to userland.

https://www.illumos.org/issues/13274

My initial fix in Tribblix, like here, was to roll back the s10_brand
pieces to a previous
version. The brand code here isn't changing at all.

This is a potential fix for illumos-gate:

https://github.com/tribblix/tribblix-build/blob/master/illumos/s10-brand-ssp.patch

(I have a successful build with it, but haven't installed it yet to test
it.)

root at myserver:~# zlogin myzone
> [Connected to zone 'myzone' pts/2]
> ld.so.1: s10_brand.so.1: fatal: relocation error: file
> /.SUNWnative/usr/lib/s10_brand.so.1: symbol __stack_chk_guard:
> referenced symbol not found
>
> [Connection to zone 'myzone' pts/2 closed]
>
> I tried to upgrade my main OI server several times last year, which
> always ended
> by booting into the previous BE and waiting another month for the next try.
> Because this is not a really usefull approach, I went into detail
> yesterday and got
> the following workaround: mount your previous BE using beadm, copy over
> 32/64 bit s10_brand.so.1 shared libraries to /usr/lib resp. /usr/lib/64
> and you are
> able to use zlogin again.
> The zone seems to be running fine directly after "pkg update" but I wasn't
> able to log into it using zlogin. To prove this here are the nm outputs
> of both
> s10_brand.so.1 libraries:
>
> root at myserver:/usr/lib/64# ls -al s10_brand.so.1*
> -rwxr-xr-x   1 root     bin       125128 Juni 21  2020 s10_brand.so.1
> -rwxr-xr-x   1 root     bin       125568 Jan. 29 09:57
> s10_brand.so.1.new_pkg_update
> root at myserver:/usr/lib/64# nm s10_brand.so.1 | grep __stack_chk_guard
> root at myserver:/usr/lib/64# nm s10_brand.so.1.new_pkg_update | grep
> __stack_chk_guard
> [318]   |                   0|                   0|OBJT |GLOB |0 |UNDEF
> |__stack_chk_guard
>
> Note: this fix is needed for both 32/64 bit libraries, the 32bit one
> re-enables zlogin,
>            and the 64bit one, for example enables "uptime" inside the
> zone again.
>
> I'm not new to SunOS/OI, but I never filled a bug against OI.
>
> Regards,
> Klaus
>
>
> _______________________________________________
> oi-dev mailing list
> oi-dev at openindiana.org
> https://openindiana.org/mailman/listinfo/oi-dev
>


-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20210201/d581c96d/attachment.html>