On Fri, Mar 20, 2009 at 02:58, Gerardo Exequiel Pozzi
<vmlinuz...@yahoo.com.ar> wrote:
> Hi,
>
> (first: sorry my very bad english)
>
> I see that many executables and libraries in Arch Linux don't take care
> about rpath in package creation step.
> <snip>

Thanks for pointing this out, it's a pretty serious security issue.
Please file a bug on http://bugs.archlinux.org about it. Probably one
of the better solutions would be for makepkg to strip the rpath in the
same step where it uses "strip" to remove debugging info.

Reply via email to