Bug 214240 – media-video/vlc-0.9* has insecure rpaths

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Markus Ullmann (RETIRED) 2008-03-22 12:55:25 UTC]

removing executable bit: /usr/lib/libvlc-control.la
removing executable bit: /usr/lib/libvlc.la

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/home/tmp/portage/media-video/vlc-0.9.0_alpha20080319/work/vlc-0.9.0-git/src/.libs usr/bin/vlc

!!! ERROR: media-video/vlc-0.9.0_alpha20080319 failed.
!!! Call stack:
!!!              ebuild-daemon.sh, line 200:  Called execute_phases 'install'
!!!                     ebuild.sh, line 638:  Called dyn_install
!!!   ebuild-default-functions.sh, line 323:  Called die
!!! The die message:
!!!  Insecure binaries detected
!!!
!!! If you need support, post the topmost build error, and the call stack if relevant.

phases failed
!!! Failed to build config wrapped(use): ebuild src: media-video/vlc-0.9.0_alpha20080319: Failed build operation: install: Failed building (False/0 return from handler)

[Comment 1 Markus Ullmann (RETIRED) 2008-07-20 21:08:41 UTC]

still there with latest version

[Comment 2 Alexis Ballier 2008-07-21 13:30:42 UTC]

(In reply to comment #1)
> still there with latest version

yes and I think I could need some advice from some libtool guru because I'm not sure how to fix this

perhaps changing:
AM_LDFLAGS = -no-undefined -no-install

to 
AM_LDFLAGS = -no-undefined

in src/Makefile.am

[Comment 3 Alexis Ballier 2008-07-21 14:20:59 UTC]

filled upstream: https://trac.videolan.org/vlc/ticket/1735

[Comment 4 Alexis Ballier 2008-08-05 10:04:04 UTC]

fixed in test3, aka _beta3 for us