From 51bd5d861fd81e33f726fdb6f4dbc9ef89ef21e0 Mon Sep 17 00:00:00 2001 From: Otto Urpelainen Date: Oct 07 2021 16:12:01 +0000 Subject: Require deleting unused bundled libraries during %prep Wiki page Bundled_Libraries contained a requirement for deleting unused bundled libraries during %prep. Moving the requirement over to the Packaging Guidelines where it belongs. --- diff --git a/guidelines/modules/ROOT/pages/index.adoc b/guidelines/modules/ROOT/pages/index.adoc index e59e47a..ade71da 100644 --- a/guidelines/modules/ROOT/pages/index.adoc +++ b/guidelines/modules/ROOT/pages/index.adoc @@ -1298,6 +1298,11 @@ If it is necessary to link against `+.a+` files from a different package, a buil Fedora packages SHOULD make every effort to avoid having multiple, separate, upstream projects bundled together in a single package. All packages whose upstreams allow them to be built against system libraries MUST be built against system libraries. +In this case, bundled libraries (and/or their source code) +MUST be explicitly deleted during `+%prep+`. +Build scripts may need to be patched to deal with this situation. +Whenever possible, the patch should conditionalize the use of the bundled libraries, +so that the patch can be sent upstream for consideration. All packages whose upstreams have no mechanism to build against system libraries MAY opt to carry bundled libraries, but if they do, they MUST include an indication of what they bundle. This provides a mechanism for locating libraries with bundled code which can, for example, assist in locating packages which may have particular security vulnerabilities.