Your message dated Sun, 19 Oct 2025 05:33:57 +0000
with message-id <[email protected]>
and subject line Bug#1118350: fixed in libselinux 3.9-2
has caused the Debian Bug report #1118350,
regarding libselinux: frequent parallel FTBFS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1118350: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118350
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libselinux
Version: 3.9-1
Severity: serious
Tags: ftbfs patch
https://buildd.debian.org/status/logs.php?pkg=libselinux&ver=3.9-1
...
/usr/bin/make pywrap ARCH=i386 USE_PCRE2=y PYTHON=python3.13
\
/usr/bin/make rubywrap ARCH=i386 USE_PCRE2=y RUBY=ruby3.3
make[2]: Entering directory '/build/reproducible-path/libselinux-3.9'
make[2]: Entering directory '/build/reproducible-path/libselinux-3.9'
/usr/bin/make -C src pywrap
/usr/bin/make -C src rubywrap
make[3]: Entering directory '/build/reproducible-path/libselinux-3.9/src'
make[3]: Entering directory '/build/reproducible-path/libselinux-3.9/src'
...
ar rcs libselinux.a avc.o avc_internal.o avc_sidtab.o booleans.o callbacks.o
canonicalize_context.o checkAccess.o check_context.o checkreqprot.o
compute_av.o compute_create.o compute_member.o compute_relabel.o compute_user.o
context.o deny_unknown.o disable.o enabled.o fgetfilecon.o freecon.o
freeconary.o fsetfilecon.o get_context_list.o get_default_type.o
get_initial_context.o getenforce.o getfilecon.o getpeercon.o init.o
is_customizable_type.o label.o label_db.o label_file.o label_media.o
label_support.o label_x.o lgetfilecon.o load_policy.o lsetfilecon.o mapping.o
matchmediacon.o matchpathcon.o policyvers.o procattr.o query_user_context.o
regex.o reject_unknown.o selinux_check_securetty_context.o selinux_config.o
selinux_internal.o selinux_restorecon.o sestatus.o setenforce.o
setexecfilecon.o setfilecon.o setrans_client.o seusers.o sha1.o stringrep.o
validatetrans.o
ar rcs libselinux.a avc.o avc_internal.o avc_sidtab.o booleans.o callbacks.o
canonicalize_context.o checkAccess.o check_context.o checkreqprot.o
compute_av.o compute_create.o compute_member.o compute_relabel.o compute_user.o
context.o deny_unknown.o disable.o enabled.o fgetfilecon.o freecon.o
freeconary.o fsetfilecon.o get_context_list.o get_default_type.o
get_initial_context.o getenforce.o getfilecon.o getpeercon.o init.o
is_customizable_type.o label.o label_db.o label_file.o label_media.o
label_support.o label_x.o lgetfilecon.o load_policy.o lsetfilecon.o mapping.o
matchmediacon.o matchpathcon.o policyvers.o procattr.o query_user_context.o
regex.o reject_unknown.o selinux_check_securetty_context.o selinux_config.o
selinux_internal.o selinux_restorecon.o sestatus.o setenforce.o
setexecfilecon.o setfilecon.o setrans_client.o seusers.o sha1.o stringrep.o
validatetrans.o
cc -Wdate-time -D_FORTIFY_SOURCE=2 -D_LARGEFILE64_SOURCE -D_LARGEFILE64_SOURCE
-g -O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/libselinux-3.9=.
-fstack-protector-strong -Wformat -Werror=format-security
-fno-semantic-interposition -Wall -Wextra -Wdate-time -D_FORTIFY_SOURCE=2
-D_LARGEFILE64_SOURCE -D_LARGEFILE64_SOURCE -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -I../include -D_GNU_SOURCE -DNO_ANDROID_BACKEND
-DUSE_PCRE2 -DPCRE2_CODE_UNIT_WIDTH=8 -DHAVE_STRLCPY -DHAVE_REALLOCARRAY
-Wl,-z,relro -Wl,-z,now -shared -o libselinux.so.1 avc.lo avc_internal.lo
avc_sidtab.lo booleans.lo callbacks.lo canonicalize_context.lo checkAccess.lo
check_context.lo checkreqprot.lo compute_av.lo compute_create.lo
compute_member.lo compute_relabel.lo compute_user.lo context.lo deny_unknown.lo
disable.lo enabled.lo fgetfilecon.lo freecon.lo freeconary.lo fsetfilecon.lo
get_context_list.lo get_default_type.lo get_initial_context.lo getenforce.lo
getfilecon.lo getpeercon.lo init.lo is_customizable_type.lo label.lo
label_db.lo label_file.lo label_media.lo label_support.lo label_x.lo
lgetfilecon.lo load_policy.lo lsetfilecon.lo mapping.lo matchmediacon.lo
matchpathcon.lo policyvers.lo procattr.lo query_user_context.lo regex.lo
reject_unknown.lo selinux_check_securetty_context.lo selinux_config.lo
selinux_internal.lo selinux_restorecon.lo sestatus.lo setenforce.lo
setexecfilecon.lo setfilecon.lo setrans_client.lo seusers.lo sha1.lo
stringrep.lo validatetrans.lo -lpcre2-8 -ldl
-Wl,-soname,libselinux.so.1,--version-script=libselinux.map,-z,defs,-z,relro
ranlib libselinux.a
ranlib libselinux.a
ranlib: libselinux.a: error reading regex.o: file truncated
make[3]: *** [Makefile:168: libselinux.a] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory '/build/reproducible-path/libselinux-3.9/src'
ln -sf libselinux.so.1 libselinux.so
make[2]: *** [Makefile:62: pywrap] Error 2
make[2]: Leaving directory '/build/reproducible-path/libselinux-3.9'
make[1]: *** [debian/rules:58: build-python-3.13] Error 2
pywrap and rubywrap are currently building libselinux.a twice in parallel,
which is both inefficient and causes build failures due to the obvious
race conditions.
The following patch fixes this by doing the all build before
instead of after the bindings builds:
--- libselinux-3.9/debian/rules.old 2025-10-18 10:25:10.459170850 +0000
+++ libselinux-3.9/debian/rules 2025-10-18 10:26:41.555059101 +0000
@@ -52,11 +52,13 @@
extra_make_args += USE_PCRE2=y
override_dh_auto_build: $(PY3VERSIONS:%=build-python-%) \
- $(RUBY_VERSIONS:%=build-ruby-%)
+ $(RUBY_VERSIONS:%=build-ruby-%) \
+ build-all
+build-all:
$(MAKE) all $(extra_make_args)
-build-python-%:
+build-python-%: build-all
$(MAKE) pywrap $(extra_make_args) PYTHON=python$*
-build-ruby-%:
+build-ruby-%: build-all
$(call ruby_env,$*) \
$(MAKE) rubywrap $(extra_make_args) RUBY=$*
--- End Message ---
--- Begin Message ---
Source: libselinux
Source-Version: 3.9-2
Done: Russell Coker <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libselinux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Russell Coker <[email protected]> (supplier of updated libselinux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Oct 2025 15:31:28 +1100
Source: libselinux
Architecture: source
Version: 3.9-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Russell Coker <[email protected]>
Closes: 1065539 1088171 1099889 1118350
Changes:
libselinux (3.9-2) unstable; urgency=medium
.
* Fix race condition in build Closes: #1118350
* Added patches except #15 because I like long lines Closes: #1065539
* Added LTO Closes: #1099889
# Added merge request
https://salsa.debian.org/selinux-team/libselinux/-/merge_requests/11/diffs
manually which should fix PCRE upgrade Closes: #1088171
Checksums-Sha1:
737ee6638fff9ab8b9ad0ad75b849adcceca4660 3011 libselinux_3.9-2.dsc
d7d50f3d9a0f9da8c9a9c9f8772f17f94c12e371 38432 libselinux_3.9-2.debian.tar.xz
7dd1a2f1eb39945e8f05799fb778223ec585dda2 16586 libselinux_3.9-2_amd64.buildinfo
Checksums-Sha256:
09c456be5461595a58c1cfd2384ab8c993d8c907e0e04dda2684d23893de834f 3011
libselinux_3.9-2.dsc
bfb77d3acaf51b056c48b9d677d29915bb8a1c41b98335d410a7249f16ea5ac1 38432
libselinux_3.9-2.debian.tar.xz
31155b8dd8155fcd3428557194446cf75e891951f47fb36c5ea69924409f2dc3 16586
libselinux_3.9-2_amd64.buildinfo
Files:
743f8b9c19db98d3f2c167dcfb2320ad 3011 libs optional libselinux_3.9-2.dsc
82bdf85eff5afbdc775837191972c38d 38432 libs optional
libselinux_3.9-2.debian.tar.xz
76839cc2e84e53ebb0e9cc854c76280d 16586 libs optional
libselinux_3.9-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=E9d9
-----END PGP SIGNATURE-----
pgpwjTU_be8ug.pgp
Description: PGP signature
--- End Message ---
