[Rpm-maint] [rpm-software-management/rpm] Stop papering over the security disaster known as prelink (#701)

[Panu Matilainen]

Back in the turn of the century somebody thought it was a neat idea
to completely compromise system security to improve program start-up
start-up times a wee bit. Since then, people have thankfully started
coming to their senses and removed prelink from distros entirely.

Lets stop papering over the security disaster: we obviously cannot
stop people from using prelink, but instead of trying to undo the
damage for verification purposes, we'll now report such a system as
compromised. Which is how it should be, IMNSHO.

This eliminates a whole lot of extra junk from each and every file
digest calculation that we do, so it might even show up on somebodys
performance charts.

Inspired by a patch to eliminate a rendundant double open of regular
files in rpmDoDigest() from Denys Vlasenko, taken a little further...
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/701

-- Commit Summary --

  * Stop papering over the security disaster known as prelink

-- File Changes --

    M macros.in (10)
    M rpmio/rpmfileutil.c (164)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/701.patch
https://github.com/rpm-software-management/rpm/pull/701.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/701
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20190510/1643e733/attachment.html>