Re: [gentoo-hardened] ET_EXEC binaries after emerge -e world

[Ned Ludd]

On Tue, 2005-05-10 at 11:24 +0100, Pedro Venda wrote:
> On Tuesday 10 May 2005 11:12, kakou wrote:
> > Pedro Venda wrote:
> > >hi everyone,
> > >
> > >I've started using hardened for a couple of weeks now. I've done an
> >
> > emerge -e
> >
> > >world and there are still 134 ET_EXEC binaries left, including for example
> > >dhcpd.
> >
> > How do you count ET_EXEC binaries left ?
>
> scanelf -aR / | grep ET_EXEC | wc -l
>
> >
> > >Shouldn't be 0 ET_EXEC binaries left after world recompilation? or could

There will never be 0. A few things really need to be ET_EXEC. Any
static binary for example will be ET_EXEC and pretty much all the glibc
(ldconfig/localedef)

Better for you todo a scanelf -pR |grep ET_EXEC

scanelf -Rp|grep ET_EXEC| awk '{print $2}'| xargs file|grep -v
"statically linked"|cut -d : -f 1| xargs qfile

qfile comes from here and I'll add it to the tree soon.
http://dev.gentoo.org/~solar/portage_misc/qfile.c


> > it be
> >
> > >that some specific ebuilds prevent generation of pic binaries?
> > >
> > >regards,
> > >pedro venda.
>
-- 
Ned Ludd <solar@g.o>

-- 
gentoo-hardened@g.o mailing list