Re: [PATCH] iptables: link libxtables against libnetfilter_conntrack

[Florian Westphal <fw@strlen.de>]

Gustavo Zacarias <gustavo@zacarias.com.ar> wrote:
> On 08/13/2013 10:59 AM, Florian Westphal wrote:
> 
> > Only with --enable-static, right?
> > Can you make it conditional on ENABLE_STATIC, like this?
> 
> Not really, it's failing for a dynamic build as well, remember binutils
> 2.22+ defaults to --no-copy-dt-needed (it's patched away in many
> distributions to avoid the general package build breakage).
> It's failing for me on a buildroot cross build which doesn't patch binutils.

I can't reproduce it using ld 2.23.1, even with "-Wl,--no-copy-dt-needed-entries".

Why does libxtables depend on lnf-conntrack?  And why don't you need to add
libm explicitly?

> -DALL_INCLUSIVE -DENABLE_IPV4 -DENABLE_IPV6 -pipe -Os -o xtables-multi
[..]
> ../extensions/libext.a(libxt_connlabel.o): In function `connlabel_get_name':
> libxt_connlabel.c:(.text+0xe): undefined reference to
> `nfct_labelmap_get_name'
> ../extensions/libext.a(libxt_connlabel.o): In function `connlabel_mt_parse':
> libxt_connlabel.c:(.text+0x6a): undefined reference to
> `nfct_labelmap_get_bit'
> ../extensions/libext.a(libxt_connlabel.o): In function
> `libxt_connlabel_init':
> libxt_connlabel.c:(.text+0x1ab): undefined reference to `nfct_labelmap_new'
> collect2: error: ld returned 1 exit status
> make[3]: *** [xtables-multi] Error 1

Yes, but that is with --enable-static.

The Makefile handles it correctly for statistics and rateest extensions
(it adds -lm) but not for the connlabel extension.