Skip to content

Commit f996e79

Browse files
committed
Workaround redhat-10 possible bug with rpmbuild and check-rpaths related to not allowing absolute RPATH entries
We include RPATH entries of /var/cfengine/lib which should be OK but for some reason check-rpaths-worker flags it as > 0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute nor relative filenames and can therefore be a SECURITY risk So setting QA_RPATHS to include this flag changes the ERROR to a WARNING but also prevents check-rpaths from finding RPATH entries that are problematic. Related bug rpm-software-management/rpm#3982 Ticket: ENT-13016 Changelog: none
1 parent cea3b9f commit f996e79

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

deps-packaging/pkg-build-rpm

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,10 @@ fi
112112
# example cmd --define 'a b':
113113
# - argv[1] = --define
114114
# - argv[2] = a b
115+
116+
# We have /var/cfengine/lib in RPATHS which should be OK
117+
# but maybe a bug in check-rpaths? https://github.com/rpm-software-management/rpm/issues/3982
118+
export QA_RPATHS=$(( 0x0001|0x0002 ))
115119
eval rpmbuild -bb \
116120
--define "'_topdir $BASEDIR/$PKGNAME'" \
117121
--define "'version $VERSION'" \

0 commit comments

Comments
 (0)