Your message dated Thu, 27 Oct 2016 16:59:10 +0000
with message-id <e1bzo1g-00064o...@franck.debian.org>
and subject line Bug#825656: fixed in libsepol 2.6-1
has caused the Debian Bug report #825656,
regarding libsepol: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
825656: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825656
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libsepol
Version: 2.5-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that libsepol could not be built reproducibly.
The lists of object files are unsorted which causes a non-deterministic
linking order.
The attached patch fixes this by sorting the lists.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
new file mode 100644
index 0000000..404b749
--- /dev/null
+++ b/debian/patches/reproducible-build.patch
@@ -0,0 +1,25 @@
+Author: Reiner Herrmann <rei...@reiner-h.de>
+Description: Sort object files for deterministic linking order
+
+--- a/src/Makefile
++++ b/src/Makefile
+@@ -18,15 +18,15 @@
+ LIBPC=libsepol.pc
+ LIBMAP=libsepol.map
+ LIBSO=$(TARGET).$(LIBVERSION)
+-OBJS= $(patsubst %.c,%.o,$(wildcard *.c))
+-LOBJS= $(patsubst %.c,%.lo,$(wildcard *.c))
++OBJS= $(patsubst %.c,%.o,$(sort $(wildcard *.c)))
++LOBJS= $(patsubst %.c,%.lo,$(sort $(wildcard *.c)))
+ CFLAGS ?= -Werror -Wall -W -Wundef -Wshadow -Wmissing-format-attribute -O2
+
+ override CFLAGS += -I. -I../include -D_GNU_SOURCE
+
+ ifneq ($(DISABLE_CIL),y)
+-OBJS += $(sort $(patsubst %.c,%.o,$(wildcard $(CILDIR)/src/*.c) $(CIL_GENERATED)))
+-LOBJS += $(sort $(patsubst %.c,%.lo,$(wildcard $(CILDIR)/src/*.c) $(CIL_GENERATED)))
++OBJS += $(sort $(patsubst %.c,%.o,$(sort $(wildcard $(CILDIR)/src/*.c)) $(CIL_GENERATED)))
++LOBJS += $(sort $(patsubst %.c,%.lo,$(sort $(wildcard $(CILDIR)/src/*.c)) $(CIL_GENERATED)))
+ override CFLAGS += -I$(CILDIR)/include
+ endif
+
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..55077d0
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+reproducible-build.patch
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: libsepol
Source-Version: 2.6-1
We believe that the bug you reported is fixed in the latest version of
libsepol, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 825...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <bi...@debian.org> (supplier of updated libsepol package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 27 Oct 2016 15:54:09 +0200
Source: libsepol
Binary: sepol-utils libsepol1 libsepol1-dev
Architecture: source amd64
Version: 2.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Laurent Bigonville <bi...@debian.org>
Description:
libsepol1 - SELinux library for manipulating binary security policies
libsepol1-dev - SELinux binary policy manipulation library and development
files
sepol-utils - Security Enhanced Linux policy utility programs
Closes: 825656 832331
Changes:
libsepol (2.6-1) unstable; urgency=medium
.
* Team upload.
* New upstream release
- Make the build reproducible (Closes: #825656)
- Produce more meaningful error messages for conflicting type rules
(Closes: #832331)
* debian/libsepol1.symbols: Add the Build-Depends-Package field
* debian/control: Bump Standards-Version to 3.9.8 (no further changes)
* debian/gbp.conf: Rename git-buildpackage section to buildpackage
Checksums-Sha1:
9e561647e39dd1bb8034652b7c5f56eaa1524cb7 1782 libsepol_2.6-1.dsc
029a43e131bd1fd55d39bfc8d11da016454029b6 442549 libsepol_2.6.orig.tar.gz
d9647314efaf001f612e418cd8689c2534a11047 13472 libsepol_2.6-1.debian.tar.xz
874795d8f8ffdf39413522a44e989f946a5b3089 787022
libsepol1-dbgsym_2.6-1_amd64.deb
d114163e688e9c3b36a01cff83eb980f553aa3f4 308562 libsepol1-dev_2.6-1_amd64.deb
c7ea9ad8c99153f3b74518b7e9b0118e4980816a 240366 libsepol1_2.6-1_amd64.deb
a23086a98be319b90611fe5eab406282db549ee8 4790
sepol-utils-dbgsym_2.6-1_amd64.deb
20e36c27ff55aabc1296f073a59c91c23f6961a5 27696 sepol-utils_2.6-1_amd64.deb
Checksums-Sha256:
02afc748156b95cf986b604b585130c7781fd7737d1355ff8677b1f8bc9262cd 1782
libsepol_2.6-1.dsc
d856d6506054f52abeaa3543ea2f2344595a3dc05d0d873ed7f724f7a16b1874 442549
libsepol_2.6.orig.tar.gz
55f0e85da07bb672c1255c0b17fed90cf1a2fb10bafb2471bff80190fab93a68 13472
libsepol_2.6-1.debian.tar.xz
f1dbe622a7bb8f5ecaf0a6899cf94b0d149b05ba6313f44df9e700ffd3b3e258 787022
libsepol1-dbgsym_2.6-1_amd64.deb
7db6fde1049d35d650cd237be2ecde70ef964e2450ab09d37e2c549417f126bd 308562
libsepol1-dev_2.6-1_amd64.deb
6fcc9a86e4aa12c091428cc7de40a0caccefd031af8e5adbbd202961654f033d 240366
libsepol1_2.6-1_amd64.deb
11daab735ad407308c9ee9a132fa9fb41ee76846bc540309d232df7cd32121e3 4790
sepol-utils-dbgsym_2.6-1_amd64.deb
1740cc138abeb65195bf47122dafe2c5f1bf71c39f74f798dfb9cf0c31a37eb1 27696
sepol-utils_2.6-1_amd64.deb
Files:
ade6f2d8e0a4d8261d773857b69a8afc 1782 libs optional libsepol_2.6-1.dsc
dc1dfd31aea4c6e4b521f3aa2bddf7de 442549 libs optional libsepol_2.6.orig.tar.gz
37f793fc17e76b689960d64097fef5ec 13472 libs optional
libsepol_2.6-1.debian.tar.xz
c12b1707646c5f5637786028e31f81d0 787022 debug extra
libsepol1-dbgsym_2.6-1_amd64.deb
925c957af425c2ad5c5f52b65ddf7b7b 308562 libdevel optional
libsepol1-dev_2.6-1_amd64.deb
7fd63b8fe37d668ae7249b7a3b3c2c28 240366 libs required libsepol1_2.6-1_amd64.deb
16754b3389c2a076d9212e50b93c170d 4790 debug extra
sepol-utils-dbgsym_2.6-1_amd64.deb
16a2b7cbbf3de6ecfccd815ef465ff93 27696 admin optional
sepol-utils_2.6-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQEuBAEBCAAYBQJYEgfSERxiaWdvbkBkZWJpYW4ub3JnAAoJEB/FiR66sEPVtukH
/itaItw4ADF9gNAaBYEBfD2wUO++7yD8yz0WgOi7Y8zBLQ1WGkHd/idYtqZdsVuE
0F3YVJzFDKBhwkBr95VCxRFPCrwepzDwp71y2PFvXWJk0n79+C5vthRlQZDDie6w
0wEgsOMK6J2IZTCtxe5dSNgaqXtIYr4lgH2hTflhHjw17DcMdqSh/Qe71eiMx2OR
KjUZlfZpgPapC5g8Q6avnuMyuMENxtHFEsWTEraFZ3DEWGp7UAEuozpdOBz7zw2k
YJVn1GAqo8IY3QIwoSAse523Bw6dAQztsXyZ7fk6TECg1E3KltdCNGE/9FHjCe6H
KkLUODaoB8HZmx0jv3r4di0=
=8IIV
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
SELinux-devel mailing list
SELinux-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel
