• Marcel Röthke's avatar
    Fix insecure RPATH of the caf-python binary · 9ba458df
    Marcel Röthke authored
    Cmakes install type PROGRAMS is misleading it is not supposed to be
    used with binaries.
    
    From the cmake documentation:
    > This form [install(PROGRAMS)] is intended to install programs that are
    > not targets, such as shell scripts. Use the TARGETS form to install
    > targets built within the project.
    
    One of the problems with "PROGRAMS" is, that it does not strip the RPATH
    from binaries when installing. This is a problem because the is is
    used to look up shared libraries. If it's destination is user
    controllable it could be used for privilege escalation.
    9ba458df
CMakeLists.txt 2.19 KB