[Bug 2003892] Re: libcap2 seems to not work correctly when linked with -Bsymbolic-functions

[Lukas Märdian]

There's now an additional failure on armhf only, which is most probably
related to the armhf test runners being executed as LXD containers on a
base system using an older kernel:

autopkgtest [09:46:55]: test upstream-root: [-----------------------
@@@ Running upstream tests (root required) @@@
## Preparation ##
## libcap2 tests ##
user namespace launched exploit worked - upgrade kernel
autopkgtest [09:46:58]: test upstream-root: -----------------------]
autopkgtest [09:47:02]: test upstream-root:  - - - - - - - - - - results - - - - - - - - - -
upstream-root        FAIL non-zero exit status 1

That "upstream-root" test is a new case, which is not yet available in
the -release version of libcap2 (1:2.44-1build3), therefore this should
not be considered a regression, but rather an issue with the test
infrastructure. IMO this test case should be skipped or hinted on armhf.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libcap2 in Ubuntu.
https://bugs.launchpad.net/bugs/2003892

Title:
  libcap2 seems to not work correctly when linked with -Bsymbolic-
  functions

Status in libcap2 package in Ubuntu:
  In Progress

Bug description:
  Ubuntu will include -Wl,-Bsymbolic-functions in the build flags by
  default. This option seems to break libcap2.

  One of the autopkgtests that is supposed to prevent an exploitation
  instance using capabilities fails:
  https://autopkgtest.ubuntu.com/results/autopkgtest-
  lunar/lunar/amd64/libc/libcap2/20230123_094238_95088@/log.gz

  The solution is to exclude this flag from the set of flags:

  debian/rules:
  export DEB_LDFLAGS_MAINT_STRIP = -Wl,-Bsymbolic-functions

  Debian seems to not be affected by that as they don't include this
  flag in their build:
  https://buildd.debian.org/status/fetch.php?pkg=libcap2&arch=amd64&ver=1%3A2.66-3&stamp=1671660323&raw=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcap2/+bug/2003892/+subscriptions