Gecko [ ap.oishifashion.com ]

Name	Size	Permission	Date
fileattrs	[ DIR ]	drwxr-xr-x	2025-12-02 10:03
lua	[ DIR ]	drwxr-xr-x	2025-03-13 03:18
macros.d	[ DIR ]	drwxr-xr-x	2025-12-02 10:03
platform	[ DIR ]	drwxr-xr-x	2025-03-13 03:18
redhat	[ DIR ]	drwxr-xr-x	2025-08-19 07:26
alt-nodejs10_native.req	70 B	-rwxr-xr-x	2022-12-15 17:53
alt-nodejs11_native.req	70 B	-rwxr-xr-x	2022-12-13 13:03
alt-nodejs12_native.req	70 B	-rwxr-xr-x	2022-12-14 06:46
alt-nodejs14_native.req	70 B	-rwxr-xr-x	2023-03-23 19:46
alt-nodejs16_native.req	40 B	-rwxr-xr-x	2023-11-03 14:58
alt-nodejs18_native.req	40 B	-rwxr-xr-x	2025-02-28 19:22
alt-nodejs19_native.req	43 B	-rwxr-xr-x	2023-12-06 19:04
alt-nodejs20_native.req	44 B	-rwxr-xr-x	2025-02-28 20:40
alt-nodejs22_native.req	44 B	-rwxr-xr-x	2025-03-03 12:58
alt-nodejs6_native.req	64 B	-rwxr-xr-x	2022-12-14 09:56
alt-nodejs8_native.req	68 B	-rwxr-xr-x	2022-12-15 17:35
alt-nodejs9_native.req	68 B	-rwxr-xr-x	2022-12-14 09:01
brp-boot-efi-times	1.43 KB	-rwxr-xr-x	2022-06-08 09:44
brp-compress	1.66 KB	-rwxr-xr-x	2020-05-28 10:04
brp-java-gcjcompile	1.4 KB	-rwxr-xr-x	2020-05-28 10:04
brp-python-bytecompile	3.82 KB	-rwxr-xr-x	2020-08-31 09:14
brp-python-hardlink	640 B	-rwxr-xr-x	2020-05-28 10:04
brp-scl-compress	1.77 KB	-rwxr-xr-x	2021-07-27 15:14
brp-scl-python-bytecompile	3.04 KB	-rwxr-xr-x	2021-07-27 15:14
brp-strip	490 B	-rwxr-xr-x	2025-03-13 03:17
brp-strip-comment-note	749 B	-rwxr-xr-x	2020-05-28 10:04
brp-strip-shared	714 B	-rwxr-xr-x	2020-05-28 10:04
brp-strip-static-archive	499 B	-rwxr-xr-x	2020-05-28 10:04
check-buildroot	1.26 KB	-rwxr-xr-x	2020-05-28 10:04
check-files	1.03 KB	-rwxr-xr-x	2020-05-28 10:04
check-prereqs	422 B	-rwxr-xr-x	2020-05-28 10:04
check-rpaths	1.02 KB	-rwxr-xr-x	2020-05-28 10:04
check-rpaths-worker	4.94 KB	-rwxr-xr-x	2025-03-13 03:17
debugedit	38 B	-rwxr-xr-x	2025-03-13 03:18
elfdeps	23.34 KB	-rwxr-xr-x	2025-03-13 03:18
find-debuginfo.sh	46 B	-rwxr-xr-x	2025-03-13 03:18
find-lang.sh	8.04 KB	-rwxr-xr-x	2025-03-13 03:17
find-provides	95 B	-rwxr-xr-x	2020-05-28 10:04
find-requires	95 B	-rwxr-xr-x	2020-05-28 10:04
fontconfig.prov	493 B	-rwxr-xr-x	2020-05-28 10:04
gstreamer1.prov	950 B	-rwxr-xr-x	2025-03-13 09:20
libtooldeps.sh	722 B	-rwxr-xr-x	2020-05-28 10:04
macros	43.12 KB	-rw-r--r--	2025-03-13 03:18
mkinstalldirs	3.46 KB	-rwxr-xr-x	2020-05-28 10:04
nodejs_native.req	74 B	-rwxr-xr-x	2024-05-20 06:02
ocamldeps.sh	6.69 KB	-rwxr-xr-x	2020-05-28 10:04
pkgconfigdeps.sh	1.34 KB	-rwxr-xr-x	2020-05-28 10:04
pythonbundles.py	3.09 KB	-rwxr-xr-x	2024-04-01 21:28
pythondistdeps.py	26.64 KB	-rwxr-xr-x	2024-04-01 21:28
rpm.daily	296 B	-rw-r--r--	2020-05-28 10:04
rpm.log	61 B	-rw-r--r--	2020-05-28 10:04
rpm.supp	688 B	-rw-r--r--	2020-05-28 10:04
rpm2cpio.sh	1.56 KB	-rwxr-xr-x	2025-03-13 03:17
rpmdb_dump	41 B	-rwxr-xr-x	2020-05-28 10:04
rpmdb_load	41 B	-rwxr-xr-x	2020-05-28 10:04
rpmdeps	19.97 KB	-rwxr-xr-x	2025-03-13 03:18
rpmpopt-4.16.1.3	11.83 KB	-rw-r--r--	2025-03-13 03:18
rpmrc	17.24 KB	-rw-r--r--	2025-03-13 03:18
scldeps.sh	258 B	-rwxr-xr-x	2021-07-27 15:14
script.req	326 B	-rwxr-xr-x	2020-05-28 10:04
sepdebugcrcfix	43 B	-rwxr-xr-x	2025-03-13 03:18
sysusers.generate-pre.sh	2.22 KB	-rwxr-xr-x	2025-06-24 13:28
sysusers.prov	605 B	-rwxr-xr-x	2025-06-24 13:28
tgpg	937 B	-rwxr-xr-x	2020-05-28 10:04

Rename

#!/usr/bin/bash

# Copyright (C) 2004 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
#  
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; version 2 of the License.
#  
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#  
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

fail=
already_shown=0

# effect of this expression is obviously:
# * match paths beginning with:
#   - $SOMETHING/<something>/..
#   - /<something>/..
# * but not paths beginning with
#   - $SOMETHING/..
#   - $SOMETHING/../../../.....
BADNESS_EXPR_32='$\(\$[^/]\+$\?$/.*$\?/$\([^.][^/]*$\|$\.[^./][^/]*$\|$\.\.[^/]\+$\)\)/\.\.$/.*$\?$'

function showHint()
{
    test "$already_shown" -eq 0 || return
    already_shown=1
    
    cat <<EOF >&2
*******************************************************************************
*
* WARNING: 'check-rpaths' detected a broken RPATH and will cause 'rpmbuild'
*          to fail. To ignore these errors, you can set the '\$QA_RPATHS'
*          environment variable which is a bitmask allowing the values
*          below. The current value of QA_RPATHS is $(printf '0x%04x' $QA_RPATHS).
*
*    0x0001 ... standard RPATHs (e.g. /usr/lib); such RPATHs are a minor
*               issue but are introducing redundant searchpaths without
*               providing a benefit. They can also cause errors in multilib
*               environments.
*    0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute
*               nor relative filenames and can therefore be a SECURITY risk
*    0x0004 ... insecure RPATHs; these are relative RPATHs which are a
*               SECURITY risk
*    0x0008 ... the special '\$ORIGIN' RPATHs are appearing after other
*               RPATHs; this is just a minor issue but usually unwanted
*    0x0010 ... the RPATH is empty; there is no reason for such RPATHs
*               and they cause unneeded work while loading libraries
*    0x0020 ... an RPATH references '..' of an absolute path; this will break
*               the functionality when the path before '..' is a symlink
*          
*
* Examples:
* - to ignore standard and empty RPATHs, execute 'rpmbuild' like
*   \$ QA_RPATHS=\$(( 0x0001|0x0010 )) rpmbuild my-package.src.rpm
* - to check existing files, set \$RPM_BUILD_ROOT and execute check-rpaths like
*   \$ RPM_BUILD_ROOT=<top-dir> /usr/lib/rpm/check-rpaths
*  
*******************************************************************************
EOF
}

function msg()
{
    local val=$1
    local cmp=$2
    local msg=
    local fail=
    local code

test $[ $val & $cmp ] -ne 0 || return 0

code=$(printf '%04x' $cmp)
    if test $[ $val & ~$QA_RPATHS ] -eq 0; then
	msg="WARNING"
    else
	showHint
	msg="ERROR  "
	fail=1
    fi

shift 2
    echo "$msg $code: $@" >&2

test -z "$fail"
}

: ${QA_RPATHS:=0}
old_IFS=$IFS

for i; do
    pos=0
    rpath=$(readelf -d "$i" 2>/dev/null | LANG=C grep '(RPATH).*:') || continue
    rpath=$(echo "$rpath" | LANG=C sed -e 's!.*(RPATH).*: \[$.*$\]!\1!p;d')
    tmp=aux:$rpath:/lib/aux || :
    IFS=:
    set -- $tmp
    IFS=$old_IFS
    shift

allow_ORIGIN=1
    for j; do
	new_allow_ORIGIN=0

if test -z "$j"; then
	    badness=16
	elif expr match "$j" "$BADNESS_EXPR_32" >/dev/null; then
	    badness=32
	else
	    case "$j" in
	        (/lib/*|/usr/lib/*|/usr/X11R6/lib/*|/usr/local/lib/*)
		    badness=0;;
	        (/lib64/*|/usr/lib64/*|/usr/X11R6/lib64/*|/usr/local/lib64/*)
		    badness=0;;

(\$ORIGIN|\$\{ORIGINX\}|\$ORIGIN/*|\$\{ORIGINX\}/*)
		    test $allow_ORIGIN -eq 0 && badness=8 || {
			badness=0
			new_allow_ORIGIN=1
		    }
		    ;;
		(/*\$PLATFORM*|/*\$\{PLATFORM\}*|/*\$LIB*|/*\$\{LIB\}*)
		    badness=0;;
	    	
	        (/lib|/usr/lib|/usr/X11R6/lib)
		    badness=1;;
	        (/lib64|/usr/lib64|/usr/X11R6/lib64)
		    badness=1;;
	    	
	        (.*)
		    badness=4;;
	        (*) badness=2;;
	    esac
	fi

allow_ORIGIN=$new_allow_ORIGIN

base=${i##$RPM_BUILD_ROOT}
	msg "$badness"  1 "file '$base' contains a standard rpath '$j' in [$rpath]"  || fail=1
	msg "$badness"  2 "file '$base' contains an invalid rpath '$j' in [$rpath]"  || fail=1
	msg "$badness"  4 "file '$base' contains an insecure rpath '$j' in [$rpath]" || fail=1
	msg "$badness"  8 "file '$base' contains the \$ORIGIN rpath specifier at the wrong position in [$rpath]" || fail=1
	msg "$badness" 16 "file '$base' contains an empty rpath in [$rpath]"         || fail=1
	msg "$badness" 32 "file '$base' contains an rpath referencing '..' of an absolute path [$rpath]" || fail=2
	let ++pos
    done
done

test -z "$fail"