Fix insecure RPATH of the caf-python binary
Cmakes install type PROGRAMS is misleading it is not supposed to be used with binaries. From the cmake documentation: > This form [install(PROGRAMS)] is intended to install programs that are > not targets, such as shell scripts. Use the TARGETS form to install > targets built within the project. One of the problems with "PROGRAMS" is, that it does not strip the RPATH from binaries when installing. This is a problem because the is is used to look up shared libraries. If it's destination is user controllable it could be used for privilege escalation.
Showing
Please register or sign in to comment