Bug 273336

Summary:	app-crypt/bsign: package unconditionally links statically
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	New packages	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED FIXED
Severity:	normal	CC:	c1pher
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Ebuild for bsign Diff

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2009-06-09 12:04:17 UTC

I'm reporting this bug because your package is currently using static linking on at least part of the files it installs:



Now, while there are packages for which the static linking is mandatory, if it's just that it's desired, you should make it optional via USE flag default for +static with EAPI=1.

Static linking _may_ be a security issue, thus shouldn't be forced on. If your package is actually a prebuilt or proprietary package, you should install in /opt instead.

Comment 1 Dane Smith (RETIRED) gentoo-dev

2010-07-15 15:28:08 UTC

Created attachment 238901 [details]
Ebuild for bsign

No longer statically compiles unless the static use flag is set.

Comment 2 Dane Smith (RETIRED) gentoo-dev

2010-07-15 15:28:26 UTC

Created attachment 238903 [details]
Diff

Comment 3 Markos Chandras (RETIRED) gentoo-dev

2010-07-16 22:22:11 UTC

+  16 Jul 2010; Markos Chandras <hwoarang@gentoo.org> bsign-0.4.5.ebuild,
+  metadata.xml:
+  Introduce static-libs use flag. Fixes bug #273336. Thanks to Dane Smith
+  <smithdanea@gmail.com> for the patch. He will proxy maintain this package
+  with me. Keyworded for amd64
+