Bug 145439 - Contains insecure RPATHs
Summary: Contains insecure RPATHs
Alias: None
Product: Fedora
Classification: Fedora
Component: gphoto2
Version: rawhide
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Tim Waugh
QA Contact:
Keywords: Security
: 152008 (view as bug list)
Depends On:
TreeView+ depends on / blocked
Reported: 2005-01-18 15:25 UTC by Enrico Scholz
Modified: 2007-11-30 22:10 UTC (History)
1 user (show)

Clone Of:
Last Closed: 2005-03-24 14:27:03 UTC

Attachments (Terms of Use)
Fix for RPATH build problem (it causes some unpackaged files, which can be solved easily) (952 bytes, text/plain)
2005-03-24 12:34 UTC, Enrico Scholz
no flags Details
proposed spec fix (1.83 KB, patch)
2005-03-24 12:39 UTC, Michael Schwendt
no flags Details | Diff

Description Enrico Scholz 2005-01-18 15:25:47 UTC
Description of problem:


| + /usr/lib/rpm/check-rpaths
| WARNING: file '/usr/lib/gphoto2_port/0.5.1/libgphoto2_port_serial.so' contains an invalid rpath '/var/tmp/gphoto2-2.1.5-root/usr/lib' in [/var/tmp/gphoto2-2.1.5-root/usr/lib]
| WARNING: file '/usr/lib/gphoto2_port/0.5.1/libgphoto2_port_usb.so' contains an invalid rpath '/var/tmp/gphoto2-2.1.5-root/usr/lib' in [/var/tmp/gphoto2-2.1.5-root/usr/lib]


| $ readelf -d /usr/lib/gphoto2/*/libgphoto2_agfa_cl20.so
| 0x0000000f (RPATH)                      Library rpath: [/usr/src/build/467105-i386/install/usr/lib]

Version-Release number of selected component (if applicable):


Comment 1 Tim Waugh 2005-03-24 11:07:40 UTC
*** Bug 152008 has been marked as a duplicate of this bug. ***

Comment 2 Enrico Scholz 2005-03-24 12:34:11 UTC
Created attachment 112288 [details]
Fix for RPATH build problem (it causes some unpackaged files, which can be solved easily)

Fix is trivial and can be described by the following words: "Never use
%makeinstall, 'make DESTDIR=$RPM_BUILD_ROOT' is the better solution".

Comment 3 Michael Schwendt 2005-03-24 12:39:49 UTC
Created attachment 112289 [details]
proposed spec fix

Attached patch fixes it. On Rawhide, however, OpenJade causes a fatal error, so
I've only done a test-build on FC3.

Comment 4 Tim Waugh 2005-03-24 14:27:03 UTC
Thanks, I used the patch from comment #3.

Note You need to log in before you can comment on or make changes to this bug.