Add reproducible.patch for reproducible builds #1

Closed
bmwiedemann wants to merge 1 commits from bmwiedemann/rocclr:rawhide into rawhide
First-time contributor
No description provided.
bmwiedemann added 1 commit 2025-10-09 11:26:36 +02:00
Owner

@bmwiedemann - please do not submit patches here. This is just a 'slave' copy of the Fedora repository.

@bmwiedemann - please do not submit patches here. This is just a 'slave' copy of the Fedora repository.
eeich closed this pull request 2025-10-09 13:30:18 +02:00
Owner

I will propose your change to the AMD developers.

I will propose your change to the AMD developers.
Author
First-time contributor

Note that a different approach will be needed when upstreaming, because /tmp is writable to users, predictable names there allow for symlink attacks (also feasible when PIDs are small), so even the status quo is likely unsafe.

There are options such as --fdebug-prefix-map= for mapping pathes that can help there.

For OBS builds we don't need to worry, because builds happen in a scratch-VM without other users.

Note that a different approach will be needed when upstreaming, because /tmp is writable to users, predictable names there allow for symlink attacks (also feasible when PIDs are small), so even the status quo is likely unsafe. There are options such as `--fdebug-prefix-map=` for mapping pathes that can help there. For OBS builds we don't need to worry, because builds happen in a scratch-VM without other users.

Pull request closed

Sign in to join this conversation.
No Reviewers
No Label
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ROCmWork/rocclr#1