Script to launch privileged container with podman
The stack-prot test [1] currently fails in Fedora and RHEL 10. On
Fedora, it says:
Hardened: /usr/bin/toolbox: FAIL: stack-prot test because stack
protection not enabled (lto:_cgo_6f668e16310a_Cfunc_mygetgrnam_r)
According to the documentation [1], the test is supposed to pass if the
C compiler is GCC and it was used with the -fstack-protector-strong
option. That's definitely the case, since both Fedora and RHEL 10 use
GCC by default, and their default build flags (including %optflags)
include -fstack-protector-strong.
There's also no function called mygetgrnam() in neither Toolbx nor its
chain of dependencies.
Therefore, temporarily disable the stack-prot test to prevent the Fedora
and RHEL CIs from failing.
[1] https://sourceware.org/annobin/annobin.html/Test-stack-prot.html
Resolves: RHEL-33522
|
||
|---|---|---|
| tests | ||
| .gitignore | ||
| gating.yaml | ||
| README.md | ||
| rpminspect.yaml | ||
| sources | ||
| toolbox-Add-migration-paths-for-coreos-toolbox-users.patch | ||
| toolbox-Make-the-build-flags-match-Fedora-s-gobuild-for-PPC64.patch | ||
| toolbox-Make-the-build-flags-match-Fedora-s-gobuild.patch | ||
| toolbox-Make-the-build-flags-match-RHEL-s-gobuild-for-PPC64.patch | ||
| toolbox-Make-the-build-flags-match-RHEL-s-gobuild.patch | ||
| toolbox-playbooks-test-system-bats-1.11-podman-5.patch | ||
| toolbox-test-system-new.patch | ||
| toolbox-test-system-Unbreak-Podman-s-downstream-Fedora-CI.patch | ||
| toolbox.conf | ||
| toolbox.spec | ||
toolbox
The toolbox package