On 2022-02-04, Paul Wise wrote: > Vagrant Cascadian wrote: > >> Over the last several months, I and others have found quite a few >> packages that embed build paths via rpath when building with cmake. > > This seems like the sort of thing that will be an ongoing problem, so > if it is detectable statically then a lintian warning might be good.
So far I have only figured out how to detect it by building packages and checking if they're reproducible, but if someone can figure out how to make it work from lintian, so much the better! I believe there is a lintian check for build paths embedded in binaries, at least, which will catch this and other issues, but maybe it could be extended to check for this more explicitly... live well, vagrant
signature.asc
Description: PGP signature
