Silence 'rpminspect --tests=stack-prot'

The stack-prot test [1] currently fails in Fedora and RHEL 10.  On
Fedora, it says:
  Hardened: /usr/bin/toolbox: FAIL: stack-prot test because stack
      protection not enabled (lto:_cgo_6f668e16310a_Cfunc_mygetgrnam_r)

According to the documentation [1], the test is supposed to pass if the
C compiler is GCC and it was used with the -fstack-protector-strong
option.  That's definitely the case, since both Fedora and RHEL 10 use
GCC by default, and their default build flags (including %optflags)
include -fstack-protector-strong.

There's also no function called mygetgrnam() in neither Toolbx nor its
chain of dependencies.

Therefore, temporarily disable the stack-prot test to prevent the Fedora
and RHEL CIs from failing.

[1] https://sourceware.org/annobin/annobin.html/Test-stack-prot.html

Resolves: RHEL-33522
This commit is contained in:
Debarshi Ray 2024-07-11 11:18:46 +02:00
parent fa705ed622
commit ce35655698
2 changed files with 7 additions and 2 deletions

View File

@ -5,7 +5,7 @@
annocheck:
extra_opts:
hardened: --skip-run-path
hardened: --skip-run-path --skip-stack-prot
runpath:
allowed_paths:

View File

@ -31,7 +31,7 @@ Version: 0.0.99.5
%endif
%endif
Release: 13%{?dist}
Release: 14%{?dist}
Summary: Tool for interactive command line environments on Linux
License: Apache-2.0
@ -206,6 +206,11 @@ install -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/containers/%{name}.conf
%changelog
* Thu Jul 11 2024 Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
- Silence 'rpminspect --tests=stack-prot'
- Silence 'rpminspect --tests=annocheck' (part 2)
Resolves: RHEL-33522
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 0.0.99.5-13
- Bump release for June 2024 mass rebuild