#915673 libapache2-mod-svn: Embeds buildd FS path in RPATH of usr/lib/apache2/modules/*.so

Package:
libapache2-mod-svn
Source:
subversion
Description:
Apache Subversion server modules for Apache httpd
Submitter:
Niels Thykier
Date:
2018-12-06 06:33:02 UTC
Severity:
normal
#915673#5
Date:
2018-12-05 21:32:01 UTC
From:
To:
According to lintian, the libapache2-mod-svn binary captures the buildd path
in the RPATH of the apache modules:

"""
libapache2-mod-svn 1.11.0~rc2-1+b1 (binary) (James McCoy <jamessan@debian.org>)

    usr/lib/apache2/modules/mod_authz_svn.so /build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_repos/.libs
    usr/lib/apache2/modules/mod_authz_svn.so /build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_subr/.libs
    usr/lib/apache2/modules/mod_dav_svn.so /build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_delta/.libs

"""

Source: https://lintian.debian.org/tags/binary-or-shlib-defines-rpath.html

Note that lintian is testing a binNMU version of libapache2-mod-svn,
which may be relevant in understanding/debugging the issue.

Thanks,
~Niels

#915673#10
Date:
2018-12-06 03:35:14 UTC
From:
To:
Control: tag -1 moreinfo

I can't reproduce that locally:

$ debsnap -a amd64 -f -d . libapache2-mod-svn 1.11.0~rc2-1+b1
$ lintian -T binary-or-shlib-defines-rpath libapache2-mod-svn_1.11.0\~rc2-1+b1_amd64.deb
$ dpkg-deb -x libapache2-mod-svn_1.11.0\~rc2-1+b1_amd64.deb lintian
$ chrpath -k -l lintian/usr/lib/apache2/modules/mod_*
  lintian/usr/lib/apache2/modules/mod_authz_svn.so: no rpath or runpath tag found.
  lintian/usr/lib/apache2/modules/mod_dav_svn.so: no rpath or runpath tag found.

I also tried re-building locally, in case there was some toolchain
change causing this to happen.  Those libraries also didn't show the use
of an RPATH.

Cheers,

#915673#17
Date:
2018-12-06 06:28:00 UTC
From:
To:
James McCoy:

I verified the lintian log and we observe this issue with the i386
binaries (and not the amd64 binaries).

"""
E: libapache2-mod-svn binary (1.11.0~rc2-1+b1) [i386]:
binary-or-shlib-defines-rpath usr/lib/apache2/modules/mod_dav_svn.so
/build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_delta/.libs
E: libapache2-mod-svn binary (1.11.0~rc2-1+b1) [i386]:
binary-or-shlib-defines-rpath usr/lib/apache2/modules/mod_dav_svn.so
/build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_fs/.libs
E: libapache2-mod-svn binary (1.11.0~rc2-1+b1) [i386]:
binary-or-shlib-defines-rpath usr/lib/apache2/modules/mod_dav_svn.so
/build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_subr/.libs
E: libapache2-mod-svn binary (1.11.0~rc2-1+b1) [i386]:
binary-or-shlib-defines-rpath usr/lib/apache2/modules/mod_dav_svn.so
/build/subversion-YNu7z5/subversion-1.11.0~rc2/BUILD/subversion/libsvn_repos/.libs
"""

(The lintian website is sadly a bit unhelpful on architecture specific
issues)

I have verified that your depsnap + lintian -T command (with i386
instead of amd64) reproduces the issue locally for me.

Thanks,
~Niels