Changeset 78ec1b9

Timestamp:

06/09/2024 12:15:07 PM (3 weeks ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

trunk

Children:

95158340

Parents:

4ed0b491

Message:

mitkrb: Get rid of rpath

File:

• postlfs/security/mitkrb.xml (modified) (3 diffs)

postlfs/security/mitkrb.xml

@@ -139 +139 @@
             --with-system-ss         \
             --with-system-verto=no   \
-            --enable-dns-for-realm &&
+            --enable-dns-for-realm   \
+            --disable-rpath          &&
 make</userinput></screen>
 
@@ -172 +173 @@
 cp -vfr ../doc -T /usr/share/doc/krb5-&mitkrb-version;</userinput></screen>
 
-    <!-- libsoup3 FTBFS with these flags if -Dgssapi=enabled (not used by
-         the book) -->
-    <para>
-      Still as the &root; user, remove linker flags setting RPATH from the
-      <command>krb5-config</command> script.  These flags are unneeded for
-      an installation in the standard prefix
-      (<filename class='directory'>/usr</filename>) and they may cause some
-      packages fail to build:
-    </para>
-
-    <screen role='root'><userinput>sed '/PROG_RPATH_FLAGS/d' -i /usr/bin/krb5-config</userinput></screen>
-
   </sect2>
 
@@ -231 +220 @@
       <parameter>--enable-dns-for-realm</parameter>: This switch allows
       realms to be resolved using the DNS server.
+    </para>
+
+    <!-- libsoup3 FTBFS with rpath enabled if -Dgssapi=enabled (not used by
+         the book) -->
+    <para>
+      <parameter>--disable-rpath</parameter>: This switch prevents
+      hard coding library search paths (rpath) into the binary executable
+      files and shared libraries.  This package does not need rpath for an
+      installation into the standard location, and rpath may sometimes cause
+      unwanted effects or even security issues.
     </para>