View Issue Details

IDProjectCategoryView StatusLast Update
0003168Spring engineGeneralpublic2012-07-11 18:40
ReporterjK Assigned Toabma  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Summary0003168: gentoo reports security problems with pr-downloader libs
Descriptionscanelf: rpath_security_checks(): Maybe? sec problem with DT_RPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/bin/pr-downloader
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RUNPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/bin/pr-downloader
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/lib/libpr-downloader_shared.so
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RUNPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/lib/libpr-downloader_shared.so
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/bin/pr-downloader
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RUNPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/bin/pr-downloader
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/lib/libpr-downloader_shared.so
scanelf: rpath_security_checks(): Maybe? sec problem with DT_RUNPATH='games/lib' in /var/tmp/portage/games-strategy/spring-89.0/image/usr/games/lib/libpr-downloader_shared.so
TagsNo tags attached.
Checked infolog.txt for Errors

Activities

abma

2012-07-11 18:21

administrator   ~0008950

hmm, i guess thats because of this?!
https://github.com/abma/pr-downloader/blob/master/CMakeLists.txt#L50

jK

2012-07-11 18:28

developer   ~0008951

Last edited: 2012-07-11 18:29

So why does it affect only pr-downloader then?

abma

2012-07-11 18:39

administrator   ~0008952

Last edited: 2012-07-11 18:40

grepping spring for "RPATH" finds nothing... only pr-downloader seems to use/set it.

hmm, if i remember right koshi added these, but i don't know if these cmake vars are really needed...


i've removed RPATH settings... lets' see what happens:
https://github.com/abma/pr-downloader/commit/2eb034d6bc405b7823a0e5f00a5aa938da137b87

(hopefully fixed, if not reopen)

Issue History

Date Modified Username Field Change
2012-07-11 16:27 jK New Issue
2012-07-11 18:21 abma Note Added: 0008950
2012-07-11 18:28 jK Note Added: 0008951
2012-07-11 18:29 jK Note Edited: 0008951
2012-07-11 18:39 abma Note Added: 0008952
2012-07-11 18:39 abma Status new => resolved
2012-07-11 18:39 abma Resolution open => fixed
2012-07-11 18:39 abma Assigned To => abma
2012-07-11 18:40 abma Note Edited: 0008952