linux-kernel - Bad rpath in cpupower with 4.0-rcX

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 6 Mar 2015 08:47:45 -0500
From:	Josh Boyer <jwboyer@...oraproject.org>
To:	"sriram@...irs.net.in" <sriram@...irs.net.in>,
	Thomas Renninger <trenn@...e.de>
Cc:	"Rafael J. Wysocki" <rafael.j.wysocki@...el.com>,
	linux-pm@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Bad rpath in cpupower with 4.0-rcX

Hi All,

Commit 5c1de006e8e66 (cpupower Makefile change to help run the tool
without 'make install') added an rpath to the cpupower binary.  From
what I can understand, this is to make it easier to run cpupower from
the local build directory without having to run make install.  It does
accomplish that, but it also leaves the binary with the rpath in it
which is considered bad practice.  It also causes cpupower to fail in
rpmbuild with the following error:

ERROR   0004: file '/usr/bin/cpupower' contains an insecure rpath './'
in [./]
error: Bad exit status from /var/tmp/rpm-tmp.A6u26r (%install)
    Bad exit status from /var/tmp/rpm-tmp.A6u26r (%install)

I understand the want for eased development, but couldn't people just
set LD_LIBRARY_PATH instead?

josh
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/