From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 6 Jan 2025 23:02:11 +0000 (+0000)
Subject: linter: Whitelist the runtime linker for the SSP check
X-Git-Tag: 0.9.30~508
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1018074311c8c0fcaf0700d67c7de1f777451bad;p=pakfire.git

linter: Whitelist the runtime linker for the SSP check

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/pakfire/linter-file.c b/src/pakfire/linter-file.c
index b775f41d5..5fdeddbf9 100644
--- a/src/pakfire/linter-file.c
+++ b/src/pakfire/linter-file.c
@@ -317,15 +317,15 @@ static int pakfire_linter_file_check_pie(struct pakfire_linter_file* lfile) {
 static int pakfire_linter_file_check_ssp(struct pakfire_linter_file* lfile) {
 	// This check will be skipped for these files
 	static const char* whitelist[] = {
+		// Runtime Linker
+		"/usr/lib*/ld-*.so*",
+
+		// GCC
 		"/usr/lib64/libgcc_s.so.*",
 		"/usr/lib64/libmvec.so.*",
 		NULL,
 	};
 
-	// Do not perform this check for runtime linkers
-	if (pakfire_file_matches(lfile->file, "/usr/lib*/ld-*.so*"))
-		return 0;
-
 	// Check if this file is whitelisted
 	for (const char** path = whitelist; *path; path++) {
 		if (pakfire_file_matches(lfile->file, *path)) {