Your message dated Sat, 29 Oct 2016 01:22:14 +0000
with message-id <e1c0ile-0000v2...@franck.debian.org>
and subject line Bug#825655: fixed in libselinux 2.6-1
has caused the Debian Bug report #825655,
regarding libselinux: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
825655: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825655
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libselinux
Version: 2.5-3
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that libselinux could not be built reproducibly.
The list of object files is unsorted and causes a non-deterministic
linking order.
The attached patch fixes this by sorting the list of source files, from
which the list of object files is derived from.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
new file mode 100644
index 0000000..1a19d54
--- /dev/null
+++ b/debian/patches/reproducible-build.patch
@@ -0,0 +1,14 @@
+Author: Reiner Herrmann <rei...@reiner-h.de>
+Description: Sort source files for deterministic linking order
+
+--- a/src/Makefile
++++ b/src/Makefile
+@@ -48,7 +48,7 @@
+ endif
+
+ GENERATED=$(SWIGCOUT) $(SWIGRUBYCOUT) selinuxswig_python_exception.i
+-SRCS= $(filter-out $(UNUSED_SRCS) $(GENERATED) audit2why.c, $(wildcard *.c))
++SRCS= $(filter-out $(UNUSED_SRCS) $(GENERATED) audit2why.c, $(sort $(wildcard *.c)))
+
+ MAX_STACK_SIZE=32768
+
diff --git a/debian/patches/series b/debian/patches/series
index 562125a..d2e44d9 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
fix-makefile-bugs.patch
fix-cross-compile.patch
0003-Avoid-mounting-proc-outside-of-selinux_init_load_pol.patch
+reproducible-build.patch
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: libselinux
Source-Version: 2.6-1
We believe that the bug you reported is fixed in the latest version of
libselinux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 825...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <bi...@debian.org> (supplier of updated libselinux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 29 Oct 2016 02:31:28 +0200
Source: libselinux
Binary: selinux-utils libselinux1 libselinux1-dev ruby-selinux python-selinux
python3-selinux
Architecture: source amd64
Version: 2.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org>
Changed-By: Laurent Bigonville <bi...@debian.org>
Description:
libselinux1 - SELinux runtime shared libraries
libselinux1-dev - SELinux development headers
python-selinux - Python bindings to SELinux shared libraries
python3-selinux - Python3 bindings to SELinux shared libraries
ruby-selinux - Ruby bindings to SELinux shared libraries
selinux-utils - SELinux utility programs
Closes: 825655
Changes:
libselinux (2.6-1) unstable; urgency=medium
.
* Team upload.
* New upstream release
- Bump libsepol1-dev build-dependency to >= 2.6 to match the release
- Make the build reproducible (Closes: #825655)
- Drop 0003-Avoid-mounting-proc-outside-of-selinux_init_load_pol.patch,
merged upstream
- debian/patches/fix-makefile-bugs.patch,
debian/patches/fix-cross-compile.patch: Refreshed
- debian/python.mk: Fix python wrapper build
- debian/libselinux1.symbols: Adjust the .symbols files, myprintf and
obj_class_compat were never part of the public API
* debian/libselinux1.symbols: Add the Build-Depends-Package field
* debian/gbp.conf: Rename git-buildpackage section to buildpackage
Checksums-Sha1:
806e076eebbb0d179ad00a65a39c5f1902d456f4 2135 libselinux_2.6-1.dsc
38213c5f3298c980a399ea73e47498e7a393e4f7 203119 libselinux_2.6.orig.tar.gz
b692b430c5e6e9884d30cf70fc99aca6a6bb7398 23356 libselinux_2.6-1.debian.tar.xz
aa66c8711c4f9ef36088746d0b9a3e1fadd89a33 196840
libselinux1-dbgsym_2.6-1_amd64.deb
8190652e9b6c542c05b4134a84d087118b0dda7f 182878 libselinux1-dev_2.6-1_amd64.deb
eb66b7c3268a301b0cfca5404d966dad483571c8 100908 libselinux1_2.6-1_amd64.deb
29c72533ea0482e26757be3a9ee0ec676be0fefc 201850
python-selinux-dbgsym_2.6-1_amd64.deb
b66b03281b3feb4f3a49c070d9f171240b3627c2 172710 python-selinux_2.6-1_amd64.deb
1a1357ab8b2f54a34c8bc27cb1ecaab307abbf30 202606
python3-selinux-dbgsym_2.6-1_amd64.deb
221e583188701ef1face07bbe279bee5eedf2d10 172800 python3-selinux_2.6-1_amd64.deb
102d263cb7b0edd6338be7e62b927ae13b0dca7f 157196
ruby-selinux-dbgsym_2.6-1_amd64.deb
146656f837493be87a73a99d2de641ab86c455e4 73416 ruby-selinux_2.6-1_amd64.deb
352c2e27f8afd8a19e549b07108489518494139c 156730
selinux-utils-dbgsym_2.6-1_amd64.deb
f6428f38f784a03a2f04549ffe43637b2fce6330 117836 selinux-utils_2.6-1_amd64.deb
Checksums-Sha256:
17d6c2166b2c38d6d05b268656bebc2489af0007c1c8f3649b4e1fa84859e4e4 2135
libselinux_2.6-1.dsc
4ea2dde50665c202253ba5caac7738370ea0337c47b251ba981c60d24e1a118a 203119
libselinux_2.6.orig.tar.gz
abc10f65414347d82baf2f0aff8e18d038477e6d1cbad05698430564e92e2ff7 23356
libselinux_2.6-1.debian.tar.xz
47756420436474bfd961adfab9448ad0bf26ecac2c34588d453a28729641e42f 196840
libselinux1-dbgsym_2.6-1_amd64.deb
eadc928fa7d9366a5552ef39abb0728463136c94ee3673ec805a506003c86217 182878
libselinux1-dev_2.6-1_amd64.deb
ad7ea837716c918d752be1aa4c0d36e138c4e432b67d7a26dd911f742f933abf 100908
libselinux1_2.6-1_amd64.deb
c1ed48d145093d538b96064f66fc0744c0bfeb9944f4ecf3abb22f3336060cf7 201850
python-selinux-dbgsym_2.6-1_amd64.deb
729b5cf0ddcd03ccde24c706c689dfa056d20240feb92edd818e163ec8d52bab 172710
python-selinux_2.6-1_amd64.deb
0d072f70c98c044944907f2986dbbe6c2647dbee7fb5033f1de1d07a1cfff17b 202606
python3-selinux-dbgsym_2.6-1_amd64.deb
bd644799c504114e5bf13fa69b7e92660b99f7e0a3c1ae8d43435c683424cc5d 172800
python3-selinux_2.6-1_amd64.deb
09820970d3b41be3e96984502dabc0c63f66ec85cc06bba405d94073a932a3b7 157196
ruby-selinux-dbgsym_2.6-1_amd64.deb
65b39059e4dbcb3f7fb4c398f808b90abbdeb4035537736efaac7af94d38f5c2 73416
ruby-selinux_2.6-1_amd64.deb
37a5845a6c357fcc0e9dfc95be46c3d6ff95bb85afc954c599cd6f5c1a2fd6af 156730
selinux-utils-dbgsym_2.6-1_amd64.deb
033ae96d4c2922e17768bb4d1d503bbcc14c8de38c7ec3fb1db67882e460711d 117836
selinux-utils_2.6-1_amd64.deb
Files:
84f6c9a68ccff685026294cbdd948755 2135 libs optional libselinux_2.6-1.dsc
0e066ba6d6e590ba4b53eed64905d901 203119 libs optional
libselinux_2.6.orig.tar.gz
ceeeca636d2d388a92e974526628f11a 23356 libs optional
libselinux_2.6-1.debian.tar.xz
b16da35238df6b3cebab392672979a2c 196840 debug extra
libselinux1-dbgsym_2.6-1_amd64.deb
89016245c21f77cdc79321d6f60ae792 182878 libdevel optional
libselinux1-dev_2.6-1_amd64.deb
33f60dd156549a88346a6dda2a5f5c99 100908 libs required
libselinux1_2.6-1_amd64.deb
52219b9796942cbcf0a73fd2eade1bb3 201850 debug extra
python-selinux-dbgsym_2.6-1_amd64.deb
4ac071f0e6060f882abc6fafc7a3c04a 172710 python optional
python-selinux_2.6-1_amd64.deb
426ea3f3f80431374fb5974e7acb8a44 202606 debug extra
python3-selinux-dbgsym_2.6-1_amd64.deb
e2bfd929c019e42ea3ba9ebdb977e427 172800 python optional
python3-selinux_2.6-1_amd64.deb
ff7d6a0329e9820a99da65b455514ebd 157196 debug extra
ruby-selinux-dbgsym_2.6-1_amd64.deb
a7e7f29e4a24f763e2ba215012fa091e 73416 ruby optional
ruby-selinux_2.6-1_amd64.deb
40bac878322b89b5274fafa0dfe8ba8d 156730 debug extra
selinux-utils-dbgsym_2.6-1_amd64.deb
bcf0906907e606d0e892d09a4571c52d 117836 admin optional
selinux-utils_2.6-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQEuBAEBCAAYBQJYE/XLERxiaWdvbkBkZWJpYW4ub3JnAAoJEB/FiR66sEPV9bUH
/2HlusaaghtWC9aIoC3FZtlP4yiVX+KYP+iz/4TZ6gjFGLHqf63aEtIpUz/II185
NDbZWjgGa0GJt7zEwxLvtTJ/4Llr4gyUV6MdLm9Ez2di+a/fJfk6shZNfHmJc4Ua
NC/7UJsoc7yvSlQSsqYZNPAOs/e29IOZ5azrLStPab0o0PFyooDSQbVy4yIY3q4s
gRUW1yiSlzj6CIb7nT2p9xOzPNrfk5HqpqWj3Cq8q8iYgmrzfC9SvC5JpEm5xct8
j0l8N2/GEdfjcIHH54p8RvcvYhTmpeg/EDyZJi3h+aUcVsQxAECerYAB9O7MuXYT
QiIAjVy8k5Pt8vOZOWLxnoY=
=fnho
-----END PGP SIGNATURE-----
--- End Message ---
