[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#397939: Lintian: outdated-autotools-helper-file

Bas Wijnen <wijnen@debian.org> writes:
> On Thu, Feb 14, 2008 at 04:02:41PM -0800, Russ Allbery wrote:

>> Note that libtool is an unusual case here and isn't the same as
>> Autoconf or Automake.  The files included in the package (libtool.m4
>> and ltmain.sh) are not generated files in the same sense.  Running
>> libtoolize basically just copies those files from the installed libtool
>> into the package.

> Oh, ok.  That changes things a bit.  In that case, not copying them, but
> using the included copy instead is similar to using an included version
> of a library instead of the package containing it.  This is bad for
> security, but not a problem with respect to policy.

Given that the files are only used during the build process, it seems
fairly irrelevant to security to me.  (Embedded copies of libltdl are a
different issue, but we already generally disable those.)

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: