[问题描述]： Anolis23环境，系统没有annobin的可执行包 [环境信息]： 机器类型：ECS [内核信息]： uname -r 6.6.25-2.2_rc1.an23.x86_64 [操作系统信息]： cat /etc/os-release NAME="Anolis OS" VERSION="23.1" ID="anolis" VERSION_ID="23.1" PLATFORM_ID="platform:an23" PRETTY_NAME="Anolis OS 23.1" ANSI_COLOR="0;31" HOME_URL="https://openanolis.cn/" BUG_REPORT_URL="https://bugzilla.openanolis.cn/" [重现步骤]： 前置条件: N/A 测试步骤: - 执行yum search annobin 期望结果: - 有annobin的可执行包 实际执行结果： 没有 [root@iZbp17oe2ne3ldnhi1xsjtZ test_anno]# yum info annobin Last metadata expiration check: 1:33:38 ago on Mon Nov 18 13:31:21 2024. Available Packages Name : annobin Version : 12.33 Release : 1.an23 Architecture : src Size : 942 k Source : None Repository : os-source Summary : Annotate and examine compiled binary files URL : https://sourceware.org/annobin/ License : GPLv3+ Description : This package contains the tools needed to annotate binary files created by : compilers, and also the tools needed to examine those annotations. : : : One of the tools is a plugin for GCC that records information about the : security options that were in effect when the binary was compiled. : : Note - the plugin is automatically enabled in gcc builds via flags : provided by the system-rpm-macros package. : : : : One of the tools is a plugin for Clang that records information about the : security options that were in effect when the binary was compiled. : : : : One of the tools is a plugin for LLVM that records information about the : security options that were in effect when the binary was compiled. : : : : One of the tools is a security checker which analyses the notes present in : annotated files and reports on any missing security options. [root@iZbp17oe2ne3ldnhi1xsjtZ test_anno]# yum search annobin Last metadata expiration check: 1:33:41 ago on Mon Nov 18 13:31:21 2024. ======================================================= Name Exactly Matched: annobin ======================================================= annobin.src : Annotate and examine compiled binary files ====================================================== Name & Summary Matched: annobin ====================================================== annobin-docs.noarch : Documentation and shell scripts for use with annobin annobin-plugin-clang.x86_64 : annobin clang plugin annobin-plugin-gcc.x86_64 : annobin gcc plugin annobin-plugin-llvm.x86_64 : annobin llvm plugin gcc-plugin-annobin.x86_64 : The annobin plugin for gcc, built by the installed version of gcc =========================================================== Name Matched: annobin =========================================================== annobin-annocheck.x86_64 : A tool for checking the security hardening status of binaries annobin-libannocheck.x86_64 : A library for checking the security hardening status of binaries 另外alinux3上是有这个包 [root@iZ6weae39z8pzvi15ax9apZ ~]# cat /etc/os-release NAME="Alibaba Cloud Linux" VERSION="3 (OpenAnolis Edition)" ID="alinux" ID_LIKE="rhel fedora centos anolis" VERSION_ID="3" VARIANT="OpenAnolis Edition" VARIANT_ID="openanolis" ALINUX_MINOR_ID="2104" ALINUX_UPDATE_ID="10" PLATFORM_ID="platform:al8" PRETTY_NAME="Alibaba Cloud Linux 3.2104 U10 (OpenAnolis Edition)" ANSI_COLOR="0;31" HOME_URL="https://www.aliyun.com/" [root@iZ6weae39z8pzvi15ax9apZ ~]# yum info annobin Last metadata expiration check: 1 day, 11:33:25 ago on Sun 17 Nov 2024 03:59:20 AM CST. Available Packages Name : annobin Version : 11.13 Release : 2.0.1.1.al8 Architecture : x86_64 Size : 973 k Source : annobin-11.13-2.0.1.1.al8.src.rpm Repository : alinux3-updates Summary : Annotate and examine compiled binary files License : GPLv3+ Description : Provides a plugin for GCC that records extra information in the files : that it compiles. : : Note - the plugin is automatically enabled in gcc builds via flags : provided by the redhat-rpm-macros package. [root@iZ6weae39z8pzvi15ax9apZ ~]# yum search annobin Last metadata expiration check: 1 day, 11:33:33 ago on Sun 17 Nov 2024 03:59:20 AM CST. ======================================================= Name Exactly Matched: annobin ======================================================= annobin.x86_64 : Annotate and examine compiled binary files ====================================================== Name & Summary Matched: annobin ====================================================== gcc-toolset-12-annobin-docs.noarch : Documentation and shell scripts for use with annobin gcc-toolset-12-annobin-plugin-gcc.x86_64 : annobin gcc plugin gcc-toolset-12-gcc-plugin-annobin.x86_64 : The annobin plugin for gcc, built by the installed version of gcc gcc-toolset-13-annobin-docs.noarch : Documentation and shell scripts for use with annobin gcc-toolset-13-annobin-plugin-clang.x86_64 : annobin clang plugin gcc-toolset-13-annobin-plugin-gcc.x86_64 : annobin gcc plugin gcc-toolset-13-annobin-plugin-llvm.x86_64 : annobin llvm plugin gcc-toolset-13-gcc-plugin-annobin.x86_64 : The annobin plugin for gcc, built by the installed version of gcc =========================================================== Name Matched: annobin =========================================================== annobin-annocheck.x86_64 : A tool for checking the security hardening status of binaries gcc-toolset-12-annobin-annocheck.x86_64 : A tool for checking the security hardening status of binaries gcc-toolset-13-annobin-annocheck.x86_64 : A tool for checking the security hardening status of binaries gcc-toolset-13-annobin-libannocheck.x86_64 : A library for checking the security hardening status of binaries
Anolis 23 的 annobin 与 anolis8 的有些不同，anolis 8 中的 annobin 在 23 中被拆分成为了 annobin-gcc-plugin 和 annobin-docs，因此不再提供 annobin 的二进制包 非 bug
OK，安装annobin-gcc-plugin后用例执行通过，适配脚本。