On Sun, 18 Nov 2001, Peter Eisentraut wrote:
> Trond Eivind Glomsrød writes:
>
> > Fix? Don't use rpath - it's evil, and should be avoided anyway.
>
> configure --disable-rpath is your friend.
Didn't know about that one - it will certainly be put to use :)
> Overall, rpath gives us much more benefit than the occasional trouble it
> creates.
When you install (not configure for, just install) into a separate tree
(for easier packaging), it's a hole which can be exploited - some packages
will rpath into /var/tmp/<foo>, for instance. Hackers can then put their
own library there. One big offender here is perl's automatic module
creation script which will change the rpaths from what you told it when
you built it to what you do when you install it.
--
Trond Eivind Glomsrød
Red Hat, Inc.
