pdns has /usr/local/lib in the rpath even thought it was never specified at compile time #728

Closed
Habbie opened this Issue Apr 26, 2013 · 3 comments

Projects

None yet

2 participants

@Habbie
Member
Habbie commented Apr 26, 2013

Hi,

When compiling powerdns on 64-bit Arch Linux, I get the following errors from our package checker ("namcap"):

pdns E: Insecure RPATH '/usr/local/lib' in file ('usr/sbin/pdns_server')
pdns E: Insecure RPATH '/usr/local/lib' in file ('usr/bin/pdnssec')
pdns E: Insecure RPATH '/usr/local/lib' in file ('usr/bin/dnsreplay')

As you can see from the current [https://projects.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/pdns PKGBUILD], "/usr/local" is never passed to ./configure, only these options:

./configure
--prefix=/usr
--sysconfdir=/etc/powerdns
--libexecdir=/usr/lib
--libdir=/usr/lib/powerdns
--mandir=/usr/share/man
--with-modules=""
--with-dynmodules="ldap pipe gmysql gpgsql gsqlite3 geo"
--disable-recursor
--disable-static

Arch Linux normally doesn't use /usr/local at all and the prefix is set to "/usr".

I tried searching for "/usr/local" and replacing with "/usr" in configure and configure.ac, but the result was the same.

These are used:

linux 3.8.3
pdns 3.2
make 3.82
autoconf 2.69
automake 1.13.1

Unless I've missed a configuration option, /usr/local/lib should not be included in the rpath.

Best regards,
Alexander Rdseth

@Habbie Habbie was assigned Apr 26, 2013
@Habbie
Member
Habbie commented Apr 26, 2013

Author: anon
Unable to edit the ticket to fix the formatting.

@ahupowerdns
Member

This issue is coming from boost.m4, unsure how to solve it. If I remove /usr/local/lib* from boost.m4, the problem goes away, but this probably introduces a new one...

@Habbie
Member
Habbie commented May 24, 2013
@Habbie Habbie added a commit that closed this issue May 27, 2013
@Habbie Habbie fix bug in boost.m4 where it insists on setting -L, causing useless R…
…PATH in our binaries. Closes #728
49977c6
@Habbie Habbie closed this in 49977c6 May 27, 2013
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment