20 Mar
2009
20 Mar
'09
11:52 a.m.
On Fri, Mar 20, 2009 at 02:58, Gerardo Exequiel Pozzi <vmlinuz386@yahoo.com.ar> wrote:
Hi,
(first: sorry my very bad english)
I see that many executables and libraries in Arch Linux don't take care about rpath in package creation step. <snip>
Thanks for pointing this out, it's a pretty serious security issue. Please file a bug on http://bugs.archlinux.org about it. Probably one of the better solutions would be for makepkg to strip the rpath in the same step where it uses "strip" to remove debugging info.