| 1 |
Hi ferringb suggested I send out a mail here. |
| 2 |
|
| 3 |
For those of you that do not know we Mike Frysinger and myself have |
| 4 |
written a general purpose ELF Q/A tool called pax-utils |
| 5 |
|
| 6 |
The tool itself can be used to preform a number of tasks. What ferringb |
| 7 |
would like todo is take advantage of this tool for the an updated |
| 8 |
verify-rdepend code. For him the gain is that scanelf the util can |
| 9 |
handle 32/64 bit big and little endian bins compiled for any arch. The |
| 10 |
old method used ldd and thus had to load the full binary into memory and |
| 11 |
resolv a bunch of runtime symbols, load extra libs. The ldd method is |
| 12 |
not cross-compile safe where scanelf is. portage-2.0.53_rc7 already |
| 13 |
makes use of the tool when installed to preform several ELF Q/A checks |
| 14 |
and it's proving itself quite useful in pinpointing some security bugs. |
| 15 |
So vs putting the tool in the base profile it seems fitting to make |
| 16 |
portage depend on it. |
| 17 |
|
| 18 |
Before he does that does anybody have any objections? If so please let |
| 19 |
us know what and why. |
| 20 |
|
| 21 |
Pseudo webpage at: |
| 22 |
http://dev.gentoo.org/~solar/pax-utils/ (Swift did the .xml loving) |
| 23 |
|
| 24 |
-- |
| 25 |
solar <solar@g.o> |
| 26 |
Gentoo Linux |
| 27 |
|
| 28 |
-- |
| 29 |
gentoo-portage-dev@g.o mailing list |
Archives