Skip to content

Commit 69be09a

Browse files
committed
Workaround redhat-10 possible bug with rpmbuild and check-rpaths related to not allowing absolute RPATH entries
We include RPATH entries of /var/cfengine/lib which should be OK but for some reason check-rpaths-worker flags it as > 0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute nor relative filenames and can therefore be a SECURITY risk So setting QA_RPATHS to include this flag changes the ERROR to a WARNING but also prevents check-rpaths from finding RPATH entries that are problematic. Related bug rpm-software-management/rpm#3982 Ticket: ENT-13016 Changelog: none
1 parent 09eadd0 commit 69be09a

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

deps-packaging/pkg-build-rpm

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,11 @@ fi
112112
# example cmd --define 'a b':
113113
# - argv[1] = --define
114114
# - argv[2] = a b
115+
116+
# We have /var/cfengine/lib in RPATHS which should be OK
117+
# We asked in https://github.com/rpm-software-management/rpm/issues/3982, and it seems allowing this is OK
118+
# 0x0002 - contains an invalid RPATH - in our case /var/cfengine/lib is OK so allow it as an exception
119+
export QA_RPATHS=$(( 0x0002 ))
115120
eval rpmbuild -bb \
116121
--define "'_topdir $BASEDIR/$PKGNAME'" \
117122
--define "'version $VERSION'" \

0 commit comments

Comments
 (0)