X-Git-Url: http://git.annexia.org/?a=blobdiff_plain;f=libguestfs_upstream.ml;h=dd69b25dd452737525457d976c4a2635e2e57dbd;hb=19bafbc8d9d829cd95a26efb5bf5c208bfdf6036;hp=ad46864de4d12bc23f0c0b1f728bbc113261f91f;hpb=efa828d6354e421ec95653832f5796dd03b089b9;p=goaljobs-goals.git

diff --git a/libguestfs_upstream.ml b/libguestfs_upstream.ml
index ad46864..dd69b25 100644
--- a/libguestfs_upstream.ml
+++ b/libguestfs_upstream.ml
@@ -153,11 +153,17 @@ and tarball_created version =
 
     make V=1
     make dist
+
+    # Ensure redhat hardening flags didn't leak into the tarball.
+    # https://bugzilla.redhat.com/show_bug.cgi?id=1214506
+    if zcat %s | grep -q redhat-hardened; then exit 1; fi
+
     mv %s %s/tarballs/%s
   " repodir
     version.version
     (quote (libguestfs_localconfigure `Git))
     (quote (libguestfs_localenv (supermin version)))
+    version.tarball
     version.tarball buildtmp version.tarball
 
 (* Goal: test a commit. *)