[Bug 471701] New: Deleting .svn directories with find triggers %install-no-mkdir-buildroot
https://bugzilla.novell.com/show_bug.cgi?id=471701 Summary: Deleting .svn directories with find triggers %install-no-mkdir-buildroot Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: bitdealer@gmail.com QAContact: adrian@novell.com Found By: --- I'm deleting ".svn" directories from %{buildroot} with find %{buildroot}%{_datadir}/%{name} -name .svn -type d -depth -exec rm -rf {} \; but doing so generates the following warning: kde4-style-bespin.src: W: %install-no-mkdir-buildroot Your install section removes the buildroot but does not create them afterwards in a secure way, which allows attackers to trivially play tricks with symlinks on you. use mkdir %buildroot (no -p option!) or don't clean the buildroot in %install, because that's anyway already done for you by rpm. which is wrong in that case IMO. The package in question is kde4-style-bespin in KDE:KDE4:Community Url to package: https://build.opensuse.org/package/show?package=kde4-style-bespin&project=KDE%3AKDE4%3ACommunity -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=471701
User crrodriguez@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=471701#c1
Cristian Rodríguez
https://bugzilla.novell.com/show_bug.cgi?id=471701
User bitdealer@gmail.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=471701#c2
--- Comment #2 from Stephan Kleine
https://bugzilla.novell.com/show_bug.cgi?id=471701
Cyril Hrubis
https://bugzilla.novell.com/show_bug.cgi?id=471701
User crrodriguez@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=471701#c3
--- Comment #3 from Cristian Rodríguez
https://bugzilla.novell.com/show_bug.cgi?id=471701
User bitdealer@gmail.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=471701#c4
--- Comment #4 from Stephan Kleine
participants (1)
-
bugzilla_noreply@novell.com