I worked on a few patches today, so now this is what I have building on all 
distros:

fix_desktop_version.patch: this fixes the XDG desktop file to make it compliant.
fix_icon_path.patch: this relocates the icon to the proper XDG-approved path
fix_samples_permissions.patch: this fixes the permissions of the native api 
sample files
fix_undefined_symbols.patch: this fixes the undefined symbols errors seen on 
some distros
set_default_rexx_path.patch: the adds the capability to relocate the main REXX 
class directory to avoid placing everything under /usr/bin
systemd-fixes.patch: this fixes the systemd files.

Some were revised to alter the CMake files as well. I’m new to CMake, so please 
tell me if I did something wrong there.
There are still a few RPMLINT warnings that can be solved easily, some will 
require extra effort, like writing missing man pages:

 [  219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe3.so
[  219s] oorexx.x86_64: W: no-manual-page-for-binary rxapid
[  219s] oorexx.x86_64: W: no-manual-page-for-binary rexx.cat
[  219s] oorexx.x86_64: W: no-manual-page-for-binary rexxtry.rex
[  219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe1.so
[  219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe2.so
[  219s] oorexx.x86_64: W: no-manual-page-for-binary callrexx1
[  219s] oorexx.x86_64: W: no-manual-page-for-binary callrexx2
[  219s] oorexx.x86_64: W: no-manual-page-for-binary rexx.img
[  219s] oorexx.x86_64: W: no-manual-page-for-binary rxapi
[  219s] Each executable in standard binary directories should have a man page.
[  219s] 
[  219s] oorexx.x86_64: W: missing-call-to-setgroups-before-setuid 
/usr/lib64/librxunixsys.so.5.0.0
[  219s] This executable is calling setuid and setgid without setgroups or 
initgroups.
[  219s] There is a high probability this mean it didn't relinquish all groups, 
and
[  219s] this would be a potential security issue to be fixed. Seek POS36-C on 
the web
[  219s] for details about the problem.
[  219s] 
[  219s] oorexx.x86_64: W: missing-call-to-chdir-with-chroot 
/usr/lib64/librxunixsys.so.5.0.0
[  219s] This executable appears to call chroot without using chdir to change 
the
[  219s] current directory. This is likely an error and permits an attacker to 
break
[  219s] out of the chroot by using fchdir. While that's not always a security 
issue,
[  219s] this has to be checked.
[  219s]
[  219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname 
/usr/lib64/librexxapi.so.5.0.0
[  219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/bin/rxapi
[  219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname 
/usr/lib64/librxsock.so.5.0.0
[  219s] The binary calls gethostbyname(). Please port the code to use 
getaddrinfo().

You can find the detailed logs at:  
https://build.opensuse.org/package/show/home:emendonca/oorexx5

Erico Mendonça
Dedicated Support Engineer
SUSE


------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel

Reply via email to