id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
9109	libnssckbi.so relinked to libnssckbi.so.orig	Pierre Labastie	Pierre Labastie	"When running the book instructions for nss, /usr/lib/libnssckbi.so is moved to libnssckbi.so.orig, and is recreated as a symlink to libp11-kit.so (if p11-kit is installed). But checking the link a few days later shows that /usr/lib/libnssckbi.so points to libnssckbi.so.orig!

This happened to Ken as well as to me.

Yesterday, I installed a new version of gnutls, and today, I noticed that the creation time for the /usr/lib/libnssckbi.so symlink was the same as the installation time for gnutls.

So I created again the symlink to libp11-kit.so:
{{{
$ ls -l /usr/lib/libnssckbi.so
lrwxrwxrwx 1 root root 18 11 avril 13:22 /usr/lib/libnssckbi.so -> libp11-kit.so
}}}
Then built gnutls. After running make, the output of the preceding command was still the same (expected, I build as a user and have no rights to change /usr/lib). Then I run ""make install"", and after that:
{{{
$ ls -l /usr/lib/libnssckbi.so
lrwxrwxrwx 1 root root 18 11 avril 13:38 /usr/lib/libnssckbi.so -> libnssckbi.so.orig
}}}

There is nowhere a mention of nssckbi, neither in the logs, nor by grepping nss[!^le] (avoids ssl and dnssec) in the build directory.

The gnutls build system uses libtool to link and install its libraries, and it seems (using ls -lt), that libnssckbi.so is modified after installing libgnutlsxx, and before installing libgnutls-dane.

The amazing part is that this modification is not recorded by porg... Maybe because /usr/lib/libnssckbi already exists, and porg is unable to ""see"" that the link is modified."	defect	closed	normal	8.1	BOOK	SVN	medium	fixed