Fixed Manual review requested.

AnalyzeReviewTask.on_manual_review: Found files with executable stack. This adds PROT_EXEC to mmap(2) during mediation which may cause security denials. Either adjust your program to not require an executable stack, strip it with 'execstack --clear-execstack ...' or remove the affected file from your snap. Affected files: usr/lib/arm-linux-gnueabihf/libdirect-1.7.so.7.0.0
This commit is contained in:
Bruno Herbelin
2025-01-10 23:47:44 +01:00
parent 65395f8af2
commit 72f444ffc5

View File

@@ -110,7 +110,7 @@ parts:
override-prime: |
craftctl default
# try remove execstack on armhf
for f in usr/lib/arm-linux-gnueabihf/libde265.so.0.1.1 usr/lib/arm-linux-gnueabihf/libmpeg2.so.0.1.0; do
for f in usr/lib/arm-linux-gnueabihf/libde265.so.0.1.8 usr/lib/arm-linux-gnueabihf/libmpeg2.so.0.1.0 usr/lib/arm-linux-gnueabihf/libdirect-1.7.so.7.0.0; do
if [ -f $f ]; then
execstack -c $f
fi