I followed the suggestion to take a look at Fedora, and it really is public there.
$ dnf repoquery --installed -l nss-softokn-freebl nss-softokn | grep '.so$' /usr/lib64/libfreebl3.so /usr/lib64/libfreeblpriv3.so /usr/lib64/libnssdbm3.so /usr/lib64/libsoftokn3.so The only special one is /usr/lib64/libnssckbi.so which goes via in indirection through /etc/alternatives as it can be provided by p11-kit- trust There might have been history in Debian we don't know of. Create a suggested fix - for now only for freebl3, not the others - to move them to an accessible path and suggest to Debian. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to nss in Ubuntu. https://bugs.launchpad.net/bugs/1744328 Title: libfreebl3.so should be public, not in the nss subdir Status in nss package in Ubuntu: New Bug description: Hi, I tried to move the chrony dependency from tomcrypt to libnss to avoid universe dependencies. While doing so I found that libfreebl3 is not "normally" linkable being outside the normal ld paths. E.g. sample program #include <nss.h> #include <hasht.h> #include <nsslowhash.h> int main(int argc, char **argv) { NSSLOWHASH_Begin(NSSLOWHASH_NewContext(NSSLOW_Init(), HASH_AlgSHA512)); return 0; } Build: gcc -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wmissing-prototypes -Wall -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/include/nss -I/usr/include/nspr -o docheck docheck.c -lfreebl3 -Wl,-Bsymbolic-functions -Wl,-z,relro -v -Wl,-v -L/usr/lib/x86_64-linux-gnu/nss Then: ldd docheck will give you libfreebl3.so => not found Obviously a link into /usr/lib/x86_64-linux-gnu/ fixes the issue but needs some more consideration if that is the thing we want (there might be a reason it is where it is). Note: Required to go on with the chrony MIR which is rather urgent to be sorted out as it has a lot of other dependencies that need to be adapted. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1744328/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
