From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Exported symbols removed in 2.5.2 Date: Tue, 03 May 2016 12:33:40 -0400 Message-ID: <3328409.nvOl5qtXXs@x2> References: <87e29370-9812-9577-6558-e86d5f47072e@debian.org> <5694853.buGQaZGD79@x2> <6c976322-72d3-d934-93c0-9695cbad6862@debian.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <6c976322-72d3-d934-93c0-9695cbad6862@debian.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Laurent Bigonville Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Tuesday, May 03, 2016 05:15:01 PM Laurent Bigonville wrote: > >> +#MISSING: 1:2.5.2-1# audit_send_user_message@Base 1:2.2.1 > >> > >> audit_set_backlog_limit@Base 1:2.2.1 > >> audit_set_backlog_wait_time@Base 1:2.4.2 > >> audit_set_enabled@Base 1:2.2.1 > >> > >> Is that expected that these 4 symbols have been removed? > > > > Yes. This corresponds to the changelog entry: > > > > - Revise function hiding technique to better protect audit ABI > > > > All functions missing are internal to the audit libraries and could cause > > symbols collisions or worse if people start using them even though they > > are > > not declared in the library headers. > > In the private.h header file, I can see the following comment: > > // This is the main messaging function used internally > // Don't hide it, it used to be a part of the public API! > extern int audit_send_user_message(int fd, int type, hide_t hide_err, > const char *message); > > So doesn't this warrant a soname bump then? The answer is not simple. It was a hidden symbol: hidden_proto(audit_send_user_message); But I noticed that this broke at some point because it was hidden in old releases but then suddenly started being visible. There has been no changes in the hiding technique since the 1.2 release. My guess is that something changed in gcc somewhere along the way that broke the hiding technique from Ulrich Drepper's DSO programming guidelines. The function was part of the public API in the 1.0.16 release. It was deprecated/hidden in the 1.2 release which dates to 7-Apr 2006. Its been about 10 years that the function prototype has not been in libaudit.h. I would hope that a missing prototype message would have been reported and fixed in the last 10 years. I have personally fixed use of the symbol in everything I know of 10 years ago. The only problem people would have is in very old utilities they wrote a long time ago, or very old versions of shadow-utils/pam. I wrote a script that looks for that symbol in all elf files. I have to test on RHEL 4 to find the symbol in any programs. So, I think you have a valid concern, but its been so long that in practice it has worked itself out. -Steve