https://bugzilla.redhat.com/show_bug.cgi?id=1206893
Bug ID: 1206893
Summary: Binary blobs in upstram tarball we build from
Product: Fedora
Version: rawhide
Component: eclipse
Assignee: akurtako(a)redhat.com
Reporter: praiskup(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, andjrobins(a)gmail.com,
eclipse-sig(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
mat.booth(a)redhat.com, msimacek(a)redhat.com,
rgrunber(a)redhat.com, swagiaal(a)redhat.com
I can see that output of the following command is not empty:
tar tf R4_platform-aggregator-I20150317-2000.tar.xz \
| grep -e \\.jar$ -e \\.njar$
Do you think that we could call something like:
find -delete -name '*.jar' -o -name '*.njar' -o -name
'*.class'
.. somewhere early in %prep phase, as soon as the tarballs are extracted?
That would kind of work-around our guarantees that we don't build from hacked
binary blobs.
I was unable to check whether those binary files are actually used
because the eclipse package fails to build in my mock profile even if I do not
edit it. However, if those actually are used - it would be probably serious
packaging problem against our Java PG.
(background story: I tried to resolve similar problems in my package and I
picked eclipse randomly as typical java package I should learn from, but
found similar issues)
Pavel
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=PrN4W1NzXm&a=cc_unsubscribe