Gentoo Archives: gentoo-user

From: Ian Zimmerman <itz@×××××××.net>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Re: palemoon again: USE=system-libs
Date: Mon, 16 Jan 2017 05:53:57
Message-Id: 20170116055045.20216.04708699@matica.foolinux.mooo.com
In Reply to: [gentoo-user] Re: palemoon again: USE=system-libs by Jonathan Callen
1 On 2017-01-15 22:47, Jonathan Callen wrote:
2
3 > >> Looking at the ebuild, one gets the impression that setting this
4 > >> USE flag should result in linking with (at least) the system
5 > >> libjpeg, zlib, libbz2, libpng, sqlite, and cairo. Which should be
6 > >> at least a little bit more secure, from my POV, than having all
7 > >> that code embedded and not necessarily getting updated for CVEs in
8 > >> those libraries.
9 > >>
10 > >> But a trivial ldd check after installation shows that no such thing
11 > >> actually happens. WTH??
12
13 > Assuming that nothing about this has changed since they forked from
14 > Firefox, you are checking the ldd(1) output on the wrong file. The
15 > main executable does a dlopen(3) on a file named "libxul.so" (Firefox
16 > has it in /usr/lib64/firefox, so wherever palemoon keeps its main
17 > install directory), which then has the normal linkage against the
18 > system libraries.
19
20 Yay! Some Real Information (TM)! Thanks a lot!
21
22 So, I just need to rebuild with -optimize and +jemalloc if I care about
23 the performance.
24
25 Anyone knows what shared-js does?
26
27 --
28 Please *no* private Cc: on mailing lists and newsgroups
29 Personal signed mail: please _encrypt_ and sign
30 Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html