19 Dec
2024
19 Dec
'24
6:10 a.m.
For cmake this should be much less of a (security) concern as it is a build-system
generator only: it does not change the distro build tools, viz., make / gcc / binutils -
which are used during the actual build.
Users buster/16.04/18.04 can use 3.31 from kitware - the generated Makefiles can be
vetted. One advantage of cmake is that the output directory is outside the source tree
which can be mounted read-only!
Compiling a specific app from sources usually gets
reviewed and approved if that system is designated for running it. But changing the
default build tools and other packaged libs are hardly accepted because they affect the
entire system and they are more security sensitive than a single app.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4078#issuecomment-2552733146
You are receiving this because you commented.
Message ID: <kamailio/kamailio/issues/4078/2552733146(a)github.com>