On Sat, Jan 30, 2021 at 11:58 AM Klaus Ziegler - owner of sunfreeware.de < [email protected]> wrote:
> Hi, > > Solaris10 branded zone support in Openindiana is broken likely since last > year July, because of the following undefined symbol in s10_brand.so.1: > November, when stack smashing protection was added to userland. https://www.illumos.org/issues/13274 My initial fix in Tribblix, like here, was to roll back the s10_brand pieces to a previous version. The brand code here isn't changing at all. This is a potential fix for illumos-gate: https://github.com/tribblix/tribblix-build/blob/master/illumos/s10-brand-ssp.patch (I have a successful build with it, but haven't installed it yet to test it.) root@myserver:~# zlogin myzone > [Connected to zone 'myzone' pts/2] > ld.so.1: s10_brand.so.1: fatal: relocation error: file > /.SUNWnative/usr/lib/s10_brand.so.1: symbol __stack_chk_guard: > referenced symbol not found > > [Connection to zone 'myzone' pts/2 closed] > > I tried to upgrade my main OI server several times last year, which > always ended > by booting into the previous BE and waiting another month for the next try. > Because this is not a really usefull approach, I went into detail > yesterday and got > the following workaround: mount your previous BE using beadm, copy over > 32/64 bit s10_brand.so.1 shared libraries to /usr/lib resp. /usr/lib/64 > and you are > able to use zlogin again. > The zone seems to be running fine directly after "pkg update" but I wasn't > able to log into it using zlogin. To prove this here are the nm outputs > of both > s10_brand.so.1 libraries: > > root@myserver:/usr/lib/64# ls -al s10_brand.so.1* > -rwxr-xr-x 1 root bin 125128 Juni 21 2020 s10_brand.so.1 > -rwxr-xr-x 1 root bin 125568 Jan. 29 09:57 > s10_brand.so.1.new_pkg_update > root@myserver:/usr/lib/64# nm s10_brand.so.1 | grep __stack_chk_guard > root@myserver:/usr/lib/64# nm s10_brand.so.1.new_pkg_update | grep > __stack_chk_guard > [318] | 0| 0|OBJT |GLOB |0 |UNDEF > |__stack_chk_guard > > Note: this fix is needed for both 32/64 bit libraries, the 32bit one > re-enables zlogin, > and the 64bit one, for example enables "uptime" inside the > zone again. > > I'm not new to SunOS/OI, but I never filled a bug against OI. > > Regards, > Klaus > > > _______________________________________________ > oi-dev mailing list > [email protected] > https://openindiana.org/mailman/listinfo/oi-dev > -- -Peter Tribble http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
_______________________________________________ oi-dev mailing list [email protected] https://openindiana.org/mailman/listinfo/oi-dev
