Bugzilla – Bug 1032
sudo 1.9.11 fails on AIX 7.2
Last modified: 2022-06-08 07:24:40 MDT
After updating to sudo 1.9.11 (prebuilt package from https://github.com/sudo-project/sudo/releases/download/SUDO_1_9_11/sudo-1.9.11-1.aix72.rpm) on an AIX 7.2 machine, running "sudo -i" exits with this error: exec(): 0509-036 Cannot load program sudo because of the following errors: 0509-130 Symbol resolution failed for /opt/freeware/libexec/sudo/libsudo_util.so because: 0509-136 Symbol _GLOBAL__AIXI_libatomic_so (number 199) is not exported from dependent module /usr/lib/libatomic.a(libatomic.so.1). 0509-136 Symbol _GLOBAL__AIXD_libatomic_so (number 200) is not exported from dependent module /usr/lib/libatomic.a(libatomic.so.1). 0509-136 Symbol __atomic_is_lock_free (number 201) is not exported from dependent module /usr/lib/libatomic.a(libatomic.so.1). 0509-192 Examine .loader section symbols with the 'dump -Tv' command. The machine is running the most recent TL and SP for AIX 7.2, i.e. 7200-05-04-2220. The aforementioned /usr/lib/libatomic.a file is part of the libc++.rte fileset which is at level 16.1.0.8.
It looks like the problem is that sudo was linked against the gcc libatomic.a which exports different symbols. This is a dependency from the version of OpenSSL sudo links with. It should be possible to just build without atomic support as sudo doesn't need that.
Yep, when I temporarily change the /usr/lib/libatomic.a symlink to point to /opt/freeware/lib/libatomic.a instead of /usr/lpp/xlC/lib/libatomic.a, it works as expected. So, if atomic support isn't needed, will you rebuild the RPM packages for AIX? Or should I build them myself?
I will rebuild the sudo 1.9.11 AIX packages.
Great, thank you!
I rebuilt the 1.9.11 AIX packages with a version of OpenSSL that doesn't require gcc's libatomic.a. You can download them from sudo.ws or github.
Downloaded and tested the new package for AIX 7.2. Works just fine. Thanks a lot for the quick fix! BTW, just for the record: The SHA checksums for the AIX packages on the download webpage seem to be still the old ones.
Thanks, I forgot to regenerate that page, fixed now.