Bug 124224 – PerlQt-3.0.0.8-r1 (at least) has insecure RUNPATH

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Alan Mimms 2006-02-26 19:36:04 UTC]

Tail of emerge --ask --deep PerlQt:

man:
gzipping man page: Qt.3pm
prepallstrip:
strip: i686-pc-linux-gnu-strip --strip-unneeded
   usr/bin/puic
   usr/lib/libsmokeqt.so.1.2.1
   usr/lib/perl5/site_perl/5.8.7/i686-linux/auto/Qt/Qt.so
making executable: /usr/lib/libsmokeqt.so.1.2.1

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/usr/qt/3/lib:/var/tmp/portage/PerlQt-3.008-r1/image/usr/lib:/usr/lib usr/bin/puic
/usr/qt/3/lib:/usr/lib/gcc/i686-pc-linux-gnu/3.4.4:/var/tmp/portage/PerlQt-3.008-r1/image/usr/lib:/usr/lib usr/lib/libsmokeqt.so.1.2.1
/var/tmp/portage/PerlQt-3.008-r1/image/usr/lib:/usr/qt/3/lib usr/lib/perl5/site_perl/5.8.7/i686-linux/auto/Qt/Qt.so


!!! ERROR: dev-perl/PerlQt-3.008-r1 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.

================

emerge --info:
Portage 2.0.54 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r2, 2.6.15-ck3-r1 i686)
=================================================================
System uname: 2.6.15-ck3-r1 i686 AMD Athlon(tm) 64 Processor 3700+
Gentoo Base System version 1.6.14
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=athlon64 -mtune=athlon64 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/fax /usr/lib/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /var/www/localhost/htdocs /etc/env.d"
CXXFLAGS="-O3 -march=athlon64 -mtune=athlon64 -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.osuosl.org/ http://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ http://gentoo.llarian.net/ ftp://gentoo.llarian.net/pub/gentoo http://mirror.datapipe.net/gentoo http://gentoo.cites.uiuc.edu/pub/gentoo/ http://cudlug.cudenver.edu/gentoo/ http://mirror.usu.edu/mirrors/gentoo/ http://gentoo.mirrors.easynews.com/linux/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="x86 16bit 3dnow 3dnowext S3TC X Xaw3d a52 aac aalib acpi acpi4linux ada alsa apache2 apm audiofile avi bash-completion bdf berkdb bindist bitmap-fonts blender-game bootsplash browserplugin bzlib caps ccache cdda cddb cdf cdio cdparanoia cdr codecs cpdflib crypt cscope css ctype cups curl curlwrappers dba dbm dio directfb divx4linux doc dpms dvd dvdr dvdread edl emacs encode ethereal examples exif fastcgi fat ffmpeg firefox flac flash fmod fmp font-server foomaticdb fortran freetds freetype ftp gcj gd gif gimp gimpprint gnutls gphoto2 graphviz gs gstreamer gtk gtk2 gtkhtml imagemagick imlib inifile ipv6 jack jack-tmpfs jai java javascript jfs jikes jpeg jpeg2k kde kdeenablefinal kerberos ladcca lcms ldap lesstif lm_sensors logitech-mouse logrotate lzo lzw lzw-tiff mad math mbox mhash mikmod mime mjpeg mmap mmx mmx2 mmxext mng motif mozilla moznocompose moznoirc moznomail mozp3p mozsvg mozxmlterm mp3 mpeg mpeg4 mplayer mpm-prefork mysql mysqli native ncurses network nis nptl nsplugin ntfs nvidia odbc ogg oggvorbis openal opengl oss pcre pdf pdflib pear-db perl perlsuid php physfs pic pie plotutils png posix povray ppds private pthreads python qemu-fast qt quicktime rdesktop readline real recode reiser4 reiserfs samba scanner sdl sendfile sensord server shared sharedmem simplexml slang slp smime sndfile snmp sockets softmmu source sox spamassassin speex spell spl sql sse ssl stream subversion svg svga svgz symlink sysfs syslog sysvipc szip tcltk tga theora threads tidy tiff timidity tokenizer transcode truetype truetype-fonts type1 type1-fonts uml usb utf8 vhosts videos vidix vorbis win32codecs wma123 wmf wxwindows xemacs xfs xine xinerama xml xml2 xmlrpc xmms xpm xprint xsl xslt xv xvid yp zeroconf zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS

[Comment 1 Jakub Moc (RETIRED) 2006-02-26 23:35:46 UTC]

*** This bug has been marked as a duplicate of 114820 ***