saltstack / saltstack/salt

[BUG] `/opt/salt/bin/run` loads `libcrypto` in an unsafe way

Open
#64,042 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description

/opt/salt/bin/run loads libcrypto in an unsafe way

sudo salt-call --lhelp
WARNING: /opt/salt/bin/run is loading libcrypto in an unsafe way
zsh: abort      sudo salt-call --help

Some preliminary searches indicate that this is could be fixed by symlinking to libcrypto files in /usr/local/lib; however, I haven't been able to get it working.

Setup

I installed using the onedir pkg on https://docs.saltproject.io/salt/install-guide/en/latest/topics/install-by-operating-system/macos.html.

% system_profiler SPSoftwareDataType SPHardwareDataType


Software:

    System Software Overview:

      System Version: macOS 12.6.4 (21G526)
      Kernel Version: Darwin 21.6.0
      Boot Volume: Macintosh HD
      Boot Mode: Normal
      Computer Name: administrator’s Mac Pro
      User Name: biocbuild (biocbuild)
      Secure Virtual Memory: Enabled
      System Integrity Protection: Enabled
      Time since boot: 1 day 1:50

Hardware:

    Hardware Overview:

      Model Name: Mac Pro
      Model Identifier: MacPro6,1
      Processor Name: 12-Core Intel Xeon E5
      Processor Speed: 2.7 GHz
      Number of Processors: 1
      Total Number of Cores: 12
      L2 Cache (per Core): 256 KB
      L3 Cache: 30 MB
      Hyper-Threading Technology: Enabled
      Memory: 64 GB
      System Firmware Version: 474.0.0.0.0
      OS Loader Version: 540.120.3~22
      SMC Version (system): 2.20f18
      Panel Illumination Version: 1.4a6
      Serial Number (system): F5KW3080F694
      Hardware UUID: 689C59D0-FF5D-52D8-941F-6C2C20A76209
      Provisioning UDID: 689C59D0-FF5D-52D8-941F-6C2C20A76209

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing sudo salt-call --lhelp with the macOS 12.6.4 onedir package and inspect /opt/salt/bin/run, the executable named in the report. Trace how it loads libcrypto; done means the command runs without the unsafe-loading warning or abort.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos, python
Domain
build-system, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.