Skip to content

gawk: drop sudo/shadow-utils BuildRequires to fix toolchain graph cycle #18529

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jslobodzian wants to merge 5 commits into from
Closed

gawk: drop sudo/shadow-utils BuildRequires to fix toolchain graph cycle #18529

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ae0ac76
gawk: drop sudo/shadow-utils BuildRequires to fix toolchain graph cycle
jslobodzian Aug 20, 2026
ddf3c2c
gawk: bump pinned toolchain RPM to 5.2.2-3 in toolchain_aarch64.txt
jslobodzian Aug 20, 2026
c207174
gawk: bump pinned toolchain RPM to 5.2.2-3 in toolchain_x86_64.txt
jslobodzian Aug 20, 2026
c5ea5a3
gawk: bump pinned toolchain RPM to 5.2.2-3 in pkggen_core_aarch64.txt
jslobodzian Aug 20, 2026
8e6816e
gawk: bump pinned toolchain RPM to 5.2.2-3 in pkggen_core_x86_64.txt
jslobodzian Aug 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 8 additions & 11 deletions SPECS/gawk/gawk.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: Contains programs for manipulating text files
Name: gawk
Version: 5.2.2
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv3
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -14,10 +14,6 @@ Patch2: CVE-2026-40553.patch
Requires: gmp
Requires: mpfr
Requires: readline >= 7.0
%if 0%{?with_check}
BuildRequires: shadow-utils
BuildRequires: sudo
%endif
Provides: /bin/awk
Provides: /bin/gawk
Provides: awk
Expand Down Expand Up @@ -51,12 +47,7 @@ sed -i 's/ pty1 / /' test/Makefile
# Generate locale for `en_US.iso88591` which is required for ptest
# Ideally it should have been present. Investigate if its a `chroot` only issue
%{_sbindir}/locale-gen.sh

# gawk's check_pma_security() refuses persistent memory when geteuid() == 0, so the
# pma test only runs if the suite is not run as root.
useradd testuser -m
chown -R testuser:testuser .
sudo -u testuser make %{?_smp_mflags} check
make %{?_smp_mflags} check

%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
Expand All @@ -75,6 +66,12 @@ sudo -u testuser make %{?_smp_mflags} check
%{_sysconfdir}/profile.d/gawk.sh

%changelog
* Wed Aug 19 2026 Jon Slobodzian <joslobo@microsoft.com> - 5.2.2-3
- Revert the `%check` section to its 5.2.2-1 form: run the test suite directly and
drop the sudo and shadow-utils BuildRequires. gawk is a toolchain bootstrap
package; those build-time deps created an unresolvable cycle in the package
dependency graph (grapher panic), breaking all check-enabled source builds.

* Wed Jul 15 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 5.2.2-2
- Patch for CVE-2026-40553, CVE-2026-40468, CVE-2026-40467
- Run the test suite as an unprivileged user so the pma test is exercised.
Expand Down
2 changes: 1 addition & 1 deletion toolkit/resources/manifests/package/pkggen_core_aarch64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ m4-1.4.19-2.azl3.aarch64.rpm
grep-3.11-2.azl3.aarch64.rpm
grep-lang-3.11-2.azl3.aarch64.rpm
diffutils-3.10-1.azl3.aarch64.rpm
gawk-5.2.2-2.azl3.aarch64.rpm
gawk-5.2.2-3.azl3.aarch64.rpm
findutils-4.9.0-1.azl3.aarch64.rpm
findutils-lang-4.9.0-1.azl3.aarch64.rpm
gettext-0.22-1.azl3.aarch64.rpm
Expand Down
2 changes: 1 addition & 1 deletion toolkit/resources/manifests/package/pkggen_core_x86_64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ m4-1.4.19-2.azl3.x86_64.rpm
grep-3.11-2.azl3.x86_64.rpm
grep-lang-3.11-2.azl3.x86_64.rpm
diffutils-3.10-1.azl3.x86_64.rpm
gawk-5.2.2-2.azl3.x86_64.rpm
gawk-5.2.2-3.azl3.x86_64.rpm
findutils-4.9.0-1.azl3.x86_64.rpm
findutils-lang-4.9.0-1.azl3.x86_64.rpm
gettext-0.22-1.azl3.x86_64.rpm
Expand Down
4 changes: 2 additions & 2 deletions toolkit/resources/manifests/package/toolchain_aarch64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -110,8 +110,8 @@ findutils-lang-4.9.0-1.azl3.aarch64.rpm
flex-2.6.4-7.azl3.aarch64.rpm
flex-debuginfo-2.6.4-7.azl3.aarch64.rpm
flex-devel-2.6.4-7.azl3.aarch64.rpm
gawk-5.2.2-2.azl3.aarch64.rpm
gawk-debuginfo-5.2.2-2.azl3.aarch64.rpm
gawk-5.2.2-3.azl3.aarch64.rpm
gawk-debuginfo-5.2.2-3.azl3.aarch64.rpm
gcc-13.2.0-7.azl3.aarch64.rpm
gcc-c++-13.2.0-7.azl3.aarch64.rpm
gcc-debuginfo-13.2.0-7.azl3.aarch64.rpm
Expand Down
4 changes: 2 additions & 2 deletions toolkit/resources/manifests/package/toolchain_x86_64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,8 +115,8 @@ findutils-lang-4.9.0-1.azl3.x86_64.rpm
flex-2.6.4-7.azl3.x86_64.rpm
flex-debuginfo-2.6.4-7.azl3.x86_64.rpm
flex-devel-2.6.4-7.azl3.x86_64.rpm
gawk-5.2.2-2.azl3.x86_64.rpm
gawk-debuginfo-5.2.2-2.azl3.x86_64.rpm
gawk-5.2.2-3.azl3.x86_64.rpm
gawk-debuginfo-5.2.2-3.azl3.x86_64.rpm
gcc-13.2.0-7.azl3.x86_64.rpm
gcc-aarch64-linux-gnu-13.2.0-7.azl3.x86_64.rpm
gcc-c++-13.2.0-7.azl3.x86_64.rpm
Expand Down
Loading