SUMMARY: Compiling bind-8.1.1 on Solaris 2.6

From: Dave McFerren (davem@solve.net)
Date: Wed Oct 22 1997 - 10:17:40 CDT


Managers,

Here was the original question..
-------------------------------
> I have been informed (and shown) that there is a security leak in my bind executable on Solaris 2.6. I am trying to stop this hole with the new bind-8.8.1 that is out on the net. I can get this thing to compile just fine using the 2.5.1 machine and gcc-2.7.2, however, using the solaris 2.6 machine using the gcc-2.7.3.2 compiler it fails.
>
> Has anyone gotten this thing to compile for Solaris 2.6?
--------------------------------

Thanks to the following for their input...

Joel Lee <jlee@thomas.com>
freygro@agora.fdn.fr (Fabien Reygrobellet)
Roman Huber <huber@automatix.wop.iao.fhg.de>
Rachel Polanskis <rachel@juno.virago.org.au>

Joel indicated that I should read the faq about installation of a patch to the fixinc.svr4 before building gcc.

I couldn't read the french that was send to me by Fabien. (Sorry). I think it was a me too.

Roman said that he got it to work if you comment out line 45 in port/solaris/include/port_after.h

Rachel asked if I had run the fixincludes on the 2.6 box.
----------------

Well, I did none of these. Let me expain events before running into the problem.
1. I upgraded my solaris 2.5.1 machine to 2.6. All the executables apparently worked that were previously compiled (apache, ssh, mrtg, perl, ect). I was happy since now I can run an snmp agent on my solaris box now.

2. I download a newer version of apache, and get errors in compiling it using the old gcc compiler. I pkgrm the old compiler and download the newer gcc compiler as a package from sunfreeware.com. Knowing about the fixincludes, I run that too.

3. The new apache compiles fine. I recompile ssh to make sure. It compiles fine.

4. I download the new bind after being shown my security problem with the current one, but the compiler errors out! That is when I wrote to the sunmanagers.

5. I uninstalled the gcc package, and reinstall it, WITHOUT runing the fixincludes. Now bind compiles (with lots of warnings) and runs. I also recompiled apache, and ssh to make sure. Everything works fine.

Hope this helps someone in the future

-----------------------------
Dave McFerren davem@solve.net
System Admin
Net Solutions, Inc.
816-220-0303 fax 816-220-0333
-----------------------------
"It never hurts to help!", Eek the Cat



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:12:06 CDT