FS#14003 - [pyqt] insecure RPATH

Attached to Project: Arch Linux
Opened by Allan McRae (Allan) - Sunday, 29 March 2009, 04:19 GMT
Last edited by Douglas Soares de Andrade (dsa) - Saturday, 11 April 2009, 21:33 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Douglas Soares de Andrade (dsa)
Architecture All
Severity Critical
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The file /usr/lib/python2.6/site-packages/PyQt4/QtDesigner.so has a reference to its build directory in its RPATH

readelf -d /usr/lib/python2.6/site-packages/PyQt4/QtDesigner.so | grep RPATH
This task depends upon

Closed by  Douglas Soares de Andrade (dsa)
Saturday, 11 April 2009, 21:33 GMT
Reason for closing:  Fixed
Additional comments about closing:  Thanks a lot for the infos Gerardo, gonna fix the path issues in the pyqt 4.5 release.
Comment by Douglas Soares de Andrade (dsa) - Sunday, 29 March 2009, 12:10 GMT
Hi Allan,

How can i fix this kind of issue ?

Comment by Gerardo Exequiel Pozzi (djgera) - Monday, 30 March 2009, 19:46 GMT
Before the make just execute (in this package in particular)

find -name 'Makefile' | xargs sed -i 's|-Wl,-rpath,/usr/lib||g;s|-Wl,-rpath,.* ||g'
(patch attached)

This, not only removes the insecure rpath, also removes all rpaths to /usr/lib that causes some aditionals libraries lockups that fails. Then without it, use the ld.so.cache.

More info at:
 FS#13890  - Packaging creation and rpath issues
 FS#13891  - [acl] A trivial fix RPATH issue
 FS#13965  - [kde] Compile KDE with CMAKE_SKIP_RPATH

PD: sinse new QT 4.5.0-4 is compiled with exceptions a new lib 'QtXmlPatterns.so' will be generated in python lib path.
   pyqt.rpath.fix.patch (0.3 KiB)
Comment by Gerardo Exequiel Pozzi (djgera) - Monday, 30 March 2009, 20:07 GMT
btw: the paths (-b -d -v) are OK by default (see configure.py --help), also can use --confirm-license instead of "echo yes |"

Loading...