Bug 1032

Summary:	sudo 1.9.11 fails on AIX 7.2
Product:	Sudo	Reporter:	altmark
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	normal
Version:	1.9.10
Hardware:	IBM
OS:	AIX

Description altmark 2022-06-07 05:14:24 MDT

After updating to sudo 1.9.11 (prebuilt package from https://github.com/sudo-project/sudo/releases/download/SUDO_1_9_11/sudo-1.9.11-1.aix72.rpm) on an AIX 7.2 machine, running "sudo -i" exits with this error:

exec(): 0509-036 Cannot load program sudo because of the following errors:
        0509-130 Symbol resolution failed for /opt/freeware/libexec/sudo/libsudo_util.so because:
        0509-136   Symbol _GLOBAL__AIXI_libatomic_so (number 199) is not exported from
                   dependent module /usr/lib/libatomic.a(libatomic.so.1).
        0509-136   Symbol _GLOBAL__AIXD_libatomic_so (number 200) is not exported from
                   dependent module /usr/lib/libatomic.a(libatomic.so.1).
        0509-136   Symbol __atomic_is_lock_free (number 201) is not exported from
                   dependent module /usr/lib/libatomic.a(libatomic.so.1).
        0509-192 Examine .loader section symbols with the
                 'dump -Tv' command.

The machine is running the most recent TL and SP for AIX 7.2, i.e. 7200-05-04-2220. The aforementioned /usr/lib/libatomic.a file is part of the libc++.rte fileset which is at level 16.1.0.8.

Comment 1 Todd C. Miller 2022-06-07 08:48:13 MDT

It looks like the problem is that sudo was linked against the gcc libatomic.a which exports different symbols.  This is a dependency from the version of OpenSSL sudo links with.  It should be possible to just build without atomic support as sudo doesn't need that.

Comment 2 altmark 2022-06-07 09:04:45 MDT

Yep, when I temporarily change the /usr/lib/libatomic.a symlink to point to /opt/freeware/lib/libatomic.a instead of /usr/lpp/xlC/lib/libatomic.a, it works as expected.

So, if atomic support isn't needed, will you rebuild the RPM packages for AIX? Or should I build them myself?

Comment 3 Todd C. Miller 2022-06-07 09:17:37 MDT

I will rebuild the sudo 1.9.11 AIX packages.

Comment 4 altmark 2022-06-07 09:19:28 MDT

Great, thank you!

Comment 5 Todd C. Miller 2022-06-07 11:04:35 MDT

I rebuilt the 1.9.11 AIX packages with a version of OpenSSL that doesn't require gcc's libatomic.a.  You can download them from sudo.ws or github.

Comment 6 altmark 2022-06-08 02:12:04 MDT

Downloaded and tested the new package for AIX 7.2. Works just fine. Thanks a lot for the quick fix!

BTW, just for the record: The SHA checksums for the AIX packages on the download webpage seem to be still the old ones.

Comment 7 Todd C. Miller 2022-06-08 07:24:40 MDT

Thanks, I forgot to regenerate that page, fixed now.