| 7 Oct 2025 |
Vladimír Čunát | * 🤔 right, it shouldn't have ASAN in the default build. (though I don't know audit in particular really) | 15:58:11 |
Grimmauld (any/all) | i believe it builds specific test binaries that are built with asan | 15:59:56 |
Vladimír Čunát | I don't reproduce the issue on normal 6.6 kernel. | 16:01:08 |
Grimmauld (any/all) | hydra doesn't run into this issue, but we should probably still skip the test for the sake of reproducibility | 16:02:11 |
Grimmauld (any/all) | give me a few minutes until the dependencies are built on my machine, then i'll do the skip and open a PR | 16:04:08 |
Grimmauld (any/all) | i'll target -next i guess, we don't have anything built. But this should be merged soon-ish, audit rebuilds systemd and pam and dbus and stuff iirc | 16:04:41 |
Grimmauld (any/all) | or should i target not-next and call hydra not running into it good enough? | 16:05:10 |
Vladimír Čunát | Yes, Hydra is about to start building stuff in minutes. | 16:05:16 |
Vladimír Čunát | Either is fine, I'd say. | 16:05:32 |
Vladimír Čunát | If staging-next, I'd prefer to merged that within one hour. | 16:06:18 |
Vladimír Čunát | * If staging-next, I'd prefer to merge that within one hour. | 16:06:24 |
Vladimír Čunát | Otherwise we'll be delaying the cycle and this error perhaps isn't that urgent. | 16:06:53 |
Vladimír Čunát | (audit hopefully won't be commonly rebuilt by users + combination with special kernel) | 16:07:38 |
Grimmauld (any/all) | Uh | 16:08:41 |
Grimmauld (any/all) | https://github.com/linux-audit/audit-userspace/blob/b83c84eb61e9bdaed6dc73ccde2dece154db5471/configure.ac#L304-L316 | 16:08:44 |
Grimmauld (any/all) | audit builds everything with asan | 16:08:53 |
Grimmauld (any/all) | sooo this is ugly | 16:08:58 |
Grimmauld (any/all) | and might occur at runtime on peoples systems? | 16:09:16 |
Grimmauld (any/all) | not sure | 16:09:19 |
Grimmauld (any/all) | tbh i am tempted to just force the have_asan check to fail, so it'll just build without asan and all the issues disappear | 16:11:46 |
Grimmauld (any/all) | not sure whether thats a good idea though | 16:11:53 |
Alyssa Ross | what does gentoo do? | 16:13:56 |
Vladimír Čunát | I'd expect that they have security reasons. | 16:16:44 |
Vladimír Čunát | Like, let asan crash some failures just to be safe. | 16:17:10 |
dramforever | but this only happens if the executable is built with asan right | 16:17:39 |
dramforever | otherwise it's just asan compatible | 16:17:58 |
Vladimír Čunát | Well, it looks like at least the tests in our builds do run with ASAN. | 16:19:03 |
Grimmauld (any/all) | nether gentoo nor fedora do anything special related to asan | 16:19:11 |
Vladimír Čunát | * Well, it looks like at least the tests in our audit builds do run with ASAN. | 16:19:14 |
Grimmauld (any/all) | the whole thing is built with asan, turns out | 16:19:27 |