Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 124962 - rpath behavior changes
Summary: rpath behavior changes
Status: RESOLVED FIXED
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Core (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Portage team
URL: http://bugs.gentoo.org/showdependency...
Whiteboard:
Keywords: InVCS
: 117335 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-03-04 09:19 UTC by solar (RETIRED)
Modified: 2006-06-13 05:07 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
ebuild-rpath.diff (ebuild-rpath.diff,434 bytes, patch)
2006-03-04 09:32 UTC, solar (RETIRED)
Details | Diff
ebuild-rpath.diff (ebuild-rpath.diff,777 bytes, patch)
2006-03-04 13:18 UTC, solar (RETIRED)
Details | Diff
ebuild-rpath.diff (ebuild-rpath.diff,856 bytes, patch)
2006-03-05 06:58 UTC, solar (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description solar (RETIRED) gentoo-dev 2006-03-04 09:19:01 UTC
Bug are being filed left and right for rpath security problems but our 
teams seem to be under staffed and the problems are not being addressed
quickly enough.

This bug will serve to track a behavior change in how we deal with those 
rpaths.

When FEATURES=stricter is not set and we encounter an insecure runpath 
we remove it from the offending ELF vs calling an exit. A QA warning
should still be emited. When FEATURES=stricter is set we will continue
to bail.
Comment 1 solar (RETIRED) gentoo-dev 2006-03-04 09:32:25 UTC
Created attachment 81302 [details, diff]
ebuild-rpath.diff 

I'm thinking something like this patch
Comment 2 Thierry Carrez (RETIRED) gentoo-dev 2006-03-04 13:10:16 UTC
IMHO the QA warning shall be changed so that it doesn't reference bug 81745 but asks to file a bug against the package instead.
Comment 3 solar (RETIRED) gentoo-dev 2006-03-04 13:18:35 UTC
Created attachment 81344 [details, diff]
ebuild-rpath.diff

Updated version.
Comment 4 solar (RETIRED) gentoo-dev 2006-03-05 06:58:06 UTC
Created attachment 81402 [details, diff]
ebuild-rpath.diff

This versions picks up the /var/tmp cases also. (tested on pike)
Comment 5 solar (RETIRED) gentoo-dev 2006-03-05 07:05:25 UTC
s/{PORTAGE_BUILDDIR}/${PORTAGE_BUILDDIR}/

This will require the DEPEND in the next portage to be >=pax-utils-0.1.10
Comment 6 Thierry Carrez (RETIRED) gentoo-dev 2006-03-06 09:35:02 UTC
*** Bug 117335 has been marked as a duplicate of this bug. ***
Comment 7 solar (RETIRED) gentoo-dev 2006-03-24 15:17:40 UTC
Backported to portage/main/branches/2.0.54/bin
Comment 8 solar (RETIRED) gentoo-dev 2006-06-13 05:07:31 UTC
This should be closed