On 3/1/25 9:36 AM, Dima Pasechnik wrote:
> 
> This is still a Homebrew bug (I'd even say a security vulnerability), as
> setting HOMEBREW_NO_INSTALL_CLEANUP=1
> in effect turns off checking signatures, and it doesn't look like  it was 
> meant to do this.
> 
> Dima
> 

It is not checking signatures, it is adding a self-signed signature
to the binary.

I took a look that FRICASsys has the signature inherited from sbcl.

I could not explain why fricas installs without this error message
on your system.

I also could not explain why fricas runs on system with the error
message -- the signature is from sbcl and will fail to verify.

I find the related bug on SBCL bugtracker:
https://bugs.launchpad.net/sbcl/+bug/1869401

====
You would have to remove ':executable t' from the save-lisp-and-die to
produce a conforming binary.
Basically we cheat by assuming that copying arbitrary bytes to the end
of an executable file just works. There is other tooling that doesn't
like it either, e.g. 'strip'.
====

I'll try this approach first.

- Qian

-- 
You received this message because you are subscribed to the Google Groups 
"FriCAS - computer algebra system" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to fricas-devel+unsubscr...@googlegroups.com.
To view this discussion visit 
https://groups.google.com/d/msgid/fricas-devel/27df5c0a-a666-4309-a7ee-5774e08c3e6e%40gmail.com.

Reply via email to