Skip to content

Conversation

larskanis
Copy link
Member

@larskanis larskanis commented Aug 29, 2025

This instructs cross rubies to omit the rpath linker option to the absolute path in the build environment, which is like

-Wl,-rpath,/home/kanis/.rvm/rubies/ruby-3.4.5/lib

This path is not present on the target system and could lead to security issues.

Related to sparklemotion/nokogiri#3133 and ged/ruby-pg#668

This instructs cross rubies to omit the rpath linker option to the absolute path in the build environment, which is like

```
-Wl,-rpath,/home/kanis/.rvm/rubies/ruby-3.4.5/lib
```

This path is not present on the target system and could lead to security issues.

Related to sparklemotion/nokogiri#3133
larskanis added a commit to larskanis/ruby-pg that referenced this pull request Aug 29, 2025
There are several absolute paths built into the binary.
For instance fallback path to `pg_service.conf` or the fallback path to kerberos ccache file or the rpath included into the libpq or C-ext files.

They can be avoided or fixed by disabling rpaths and by using `DESTDIR` instead of `--prefix` configure option.

Fixes ged#666

The remaining rpath to libruby will probably be fixed by: rake-compiler/rake-compiler-dock#165

Also fix the `MAKEFLAGS` option. `MAKEOPTS` was wrong.
larskanis added a commit to larskanis/ruby-pg that referenced this pull request Aug 29, 2025
There are several absolute paths built into the binary.
For instance fallback path to `pg_service.conf` or the fallback path to kerberos ccache file or the rpath included into the libpq or C-ext files.

They can be avoided or fixed by disabling rpaths and by using `DESTDIR` instead of `--prefix` configure option.

Fixes ged#666

The remaining rpath to libruby will probably be fixed by: rake-compiler/rake-compiler-dock#165

Also fix the `MAKEFLAGS` option. `MAKEOPTS` was wrong.
@larskanis larskanis merged commit 38066d4 into main Aug 30, 2025
151 checks passed
@larskanis larskanis deleted the disable-rpath branch August 30, 2025 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant