Re: [gpsd-dev] chrpath dependency

[Eric S. Raymond]

Christian Gagneraud <address@hidden>:
> I just started on that one, it was actually easy to do (see attached patch).
> So now things get built correctly but the tests using gpsfake are
> broken for some reasons I still ignore (I got connection
> refused[1]).

Unrelated bug in the Python test stuff, now fixed.

> Now I'm writing this email because I think this is all going
> nowhere, i'm not sure it is worth spending time on the connection
> refused problem given the fact that gpsfake invoke gpsd, which is
> still dynamically linked, and as such defeat the purpose of this
> idea (get rid of chrpath by using statically linkage).
> 
> My opinion is that Eric "may be over-optimizing a bit here." when it
> comes to security (I had to make it, sorry! ;))

The demand fo that security fix came from the Debian project, not me. 

> Maybe the solution is to make chrpath a hard dependency, scons fails
> if it is not detected, and get rid of all the static stuff in
> SConstruct

I tried that at one point. It made some distribution packagers very
unhappy.
-- 
                <a href="http://www.catb.org/~esr/";>Eric S. Raymond</a>