Erico, I've committed all patches to trunk.
There's one exception, systemd-fixes.patch, for which we will need the
"50-rxapid.preset" file also included in the diff.
Also, does the name, "50-rxapid.preset" make sense? Will a new preset file
be created for each successive ooRexx version/release?
Erich
On Mon, Jun 27, 2016 at 1:24 AM, Erico Mendonca <[email protected]>
wrote:
> I worked on a few patches today, so now this is what I have building on
> all distros:
>
> fix_desktop_version.patch: this fixes the XDG desktop file to make it
> compliant.
> fix_icon_path.patch: this relocates the icon to the proper XDG-approved
> path
> fix_samples_permissions.patch: this fixes the permissions of the native
> api sample files
> fix_undefined_symbols.patch: this fixes the undefined symbols errors seen
> on some distros
> set_default_rexx_path.patch: the adds the capability to relocate the main
> REXX class directory to avoid placing everything under /usr/bin
> systemd-fixes.patch: this fixes the systemd files.
>
> Some were revised to alter the CMake files as well. I’m new to CMake, so
> please tell me if I did something wrong there.
> There are still a few RPMLINT warnings that can be solved easily, some
> will require extra effort, like writing missing man pages:
>
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe3.so
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary rxapid
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary rexx.cat
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary rexxtry.rex
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe1.so
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary libwpipe2.so
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary callrexx1
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary callrexx2
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary rexx.img
> [ 219s] oorexx.x86_64: W: no-manual-page-for-binary rxapi
> [ 219s] Each executable in standard binary directories should have a man
> page.
> [ 219s]
> [ 219s] oorexx.x86_64: W: missing-call-to-setgroups-before-setuid
> /usr/lib64/librxunixsys.so.5.0.0
> [ 219s] This executable is calling setuid and setgid without setgroups or
> initgroups.
> [ 219s] There is a high probability this mean it didn't relinquish all
> groups, and
> [ 219s] this would be a potential security issue to be fixed. Seek
> POS36-C on the web
> [ 219s] for details about the problem.
> [ 219s]
> [ 219s] oorexx.x86_64: W: missing-call-to-chdir-with-chroot
> /usr/lib64/librxunixsys.so.5.0.0
> [ 219s] This executable appears to call chroot without using chdir to
> change the
> [ 219s] current directory. This is likely an error and permits an
> attacker to break
> [ 219s] out of the chroot by using fchdir. While that's not always a
> security issue,
> [ 219s] this has to be checked.
> [ 219s]
> [ 219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname
> /usr/lib64/librexxapi.so.5.0.0
> [ 219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname
> /usr/bin/rxapi
> [ 219s] oorexx.x86_64: I: binary-or-shlib-calls-gethostbyname
> /usr/lib64/librxsock.so.5.0.0
> [ 219s] The binary calls gethostbyname(). Please port the code to use
> getaddrinfo().
>
> You can find the detailed logs at:
> https://build.opensuse.org/package/show/home:emendonca/oorexx5
>
> Erico Mendonça
> Dedicated Support Engineer
> SUSE
>
>
>
> ------------------------------------------------------------------------------
> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
> Francisco, CA to explore cutting-edge tech and listen to tech luminaries
> present their vision of the future. This family event has something for
> everyone, including kids. Get more information and register today.
> http://sdm.link/attshape
> _______________________________________________
> Oorexx-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel
