[krbdev.mit.edu #1793] alpha-osf ...

Ken Raeburn via RT rt-comment at krbdev.mit.edu
Wed Sep 3 22:38:33 EDT 2003


[subject truncated because RT is broken]

"Douglas E. Engert" <deengert at anl.gov> writes:
> This brings up a nit I have had with almost all packages that build 
> shared libs. They all assume that they can derived the -rpath from 
> the -L or they don't support -rpath. (or -R or what ever.)
> This is not always the case, and it may leave build directories in the
> -rpath which could be a security risk.  

Is this actually a problem with the MIT krb5 code?  I think we're
using -rpath/-R to specify the library install directory should be
used at run time, and not the build directory.  At least, if there's a
platform where we could do it and we're not, it's a bug.

Hm, I wonder how to best test that....  Shouldn't be too complicated,
we can probably even work it into a configure script or "make check"
or something.

Ken


More information about the krb5-bugs mailing list