From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#22831: [PATCH 2/2] WIP: gnu: openssl: Restrict allowed references for openssl. Date: Tue, 1 Mar 2016 02:20:25 -0500 Message-ID: <20160301072025.GA26797@jasmine> References: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="dDRMvlgZJXvWKvBx" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56438) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aaecD-0001eP-C5 for bug-guix@gnu.org; Tue, 01 Mar 2016 02:21:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aaecA-0003y0-5I for bug-guix@gnu.org; Tue, 01 Mar 2016 02:21:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:57528) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aaecA-0003xu-0Y for bug-guix@gnu.org; Tue, 01 Mar 2016 02:21:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84) (envelope-from ) id 1aaec9-0005G8-Sy for bug-guix@gnu.org; Tue, 01 Mar 2016 02:21:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org To: 22831@debbugs.gnu.org --dDRMvlgZJXvWKvBx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Feb 29, 2016 at 07:39:53PM -0500, Leo Famulari wrote: > * gnu/packages/tls.scm (openssl)[arguments]: Add #:allowed-references. Working patch attached. --dDRMvlgZJXvWKvBx Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="0001-gnu-openssl-Restrict-allowed-references-for-openssl.patch" >From 00807e4421757f8d9204f1601de9a8286a408f91 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Mon, 29 Feb 2016 19:24:20 -0500 Subject: [PATCH] gnu: openssl: Restrict allowed references for openssl. * gnu/packages/tls.scm (openssl)[arguments]: Add #:allowed-references. --- gnu/packages/tls.scm | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 90971f2..8c72f3b 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -32,6 +32,7 @@ #:use-module (guix build-system python) #:use-module (gnu packages compression) #:use-module (gnu packages) + #:use-module (gnu packages gcc) #:use-module (gnu packages guile) #:use-module (gnu packages libffi) #:use-module (gnu packages libidn) @@ -200,6 +201,12 @@ required structures.") `(#:parallel-build? #f #:parallel-tests? #f #:test-target "test" + + ;; We want to limit what the output of this derivation refers to. + ;; Specifically, we don't want it to refer to Perl. + #:allowed-references ,(list (canonical-package glibc) + (list (canonical-package gcc) "lib") + "out") #:phases (modify-phases %standard-phases (add-before -- 2.7.1 --dDRMvlgZJXvWKvBx--