[Fedora-packaging] [fedora-java] Shipping of binaries in jar files

[Gary Benson]

Orion Poplawski wrote:
> Whatever the solution, I think we need to improve our tooling to
> check inside of archives for binaries.  I'm CC'ing the packaging
> list as well.

Please keep in mind that jarfiles get repackaged inside other jarfiles
(.war, .ear etc), and I've also seen applications that built the files
with .zip extensions (though I haven't touched Java packaging for some
time now).  To be sure you've got everything you can't rely on file
extensions, you have to open every file in the RPM (and every file in
every zipfile you find in there, ad infinitum) and look for the
zipfile magic code.  It's also best not to rely on finding the solibs
in any specific place, because the chances are there's yet another
.*ar format you haven't heard of that puts them somewhere else ;)

Cheers,
Gary

-- 
http://gbenson.net/