Source: gnutls28 Version: 3.5.13-2 Severity: normal Tags: patch The --enable/disable-rpath option is provided by one of the GnuTLS m4 macros. It's used when searching for system libraries. When a library is not found in one of /usr/lib or /usr/lib64, the build will supplement the link command with an RPATH. Since most system libraries will be found in the multiarch library directory (e.g., /usr/lib/x86_64-linux-gnu), then the build will add an RPATH to this directory.
This is usually not an issue since the build later strips all the RPATHs from the binaries. However, for tests that run during the build, this might result in using system installed gnutls libraries instead of the build libraries. This particularly can cause a test failure in test-ciphers-openssl.sh since cipher-openssl-compat links to the system libcrypto, and the RPATH added by the build will cause the system libgnutls to be used instead of the built libgnutls. -- Dan Nicholson | +1.206.437.0833 | Endless
From 1625b56b9e15ca2b2cee3b337e8985689c9cc8da Mon Sep 17 00:00:00 2001 From: Dan Nicholson <nichol...@endlessm.com> Date: Fri, 23 Jun 2017 11:16:07 -0500 Subject: [PATCH] Configure with --disable-rpath The --enable/disable-rpath option is provided by one of the GnuTLS m4 macros. It's used when searching for system libraries. When a library is not found in one of /usr/lib or /usr/lib64, the build will supplement the link command with an RPATH. Since most system libraries will be found in the multiarch library directory (e.g., /usr/lib/x86_64-linux-gnu), then the build will add an RPATH to this directory. This is usually not an issue since the build later strips all the RPATHs from the binaries. However, for tests that run during the build, this might result in using system installed gnutls libraries instead of the build libraries. This particularly can cause a test failure in test-ciphers-openssl.sh since cipher-openssl-compat links to the system libcrypto, and the RPATH added by the build will cause the system libgnutls to be used instead of the built libgnutls. --- debian/rules | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/rules b/debian/rules index 7f6758f..de6dc4b 100755 --- a/debian/rules +++ b/debian/rules @@ -22,6 +22,7 @@ override_dh_auto_configure: dh_auto_configure --verbose -- \ --enable-ld-version-script --enable-cxx \ --enable-static \ + --disable-rpath \ --without-lzo \ --enable-libdane --without-tpm --disable-guile \ --enable-openssl-compatibility \ -- 2.1.4
