ccontrol staticly links in dietlibc. I guess it should be added to the list of packages with embedded code, unless static linking is handled separately. (Please CC me on replies.) -- \0
Hi Ted, * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]:> ccontrol staticly links in dietlibc. I guess it should be added to the > list of packages with embedded code, unless static linking is handled > separately.Thanks for reporting, I added this to our list. Kind regards Nico -- Nico Golde - http://ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071015/17c6c585/attachment.pgp
Hi Ted, * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]:> ccontrol staticly links in dietlibc. I guess it should be added to the > list of packages with embedded code, unless static linking is handled > separately.BTW did you consider to use the shared library? Kind regards Nico -- Nico Golde - http://ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071015/64a1515f/attachment.pgp
* Nico Golde:> Hi Ted, > * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]: >> ccontrol staticly links in dietlibc. I guess it should be added to the >> list of packages with embedded code, unless static linking is handled >> separately. > > BTW did you consider to use the shared library?Or linking against libc6, like everybody else on the planet? 8-)
Hi Florian, * Florian Weimer <fw at deneb.enyo.de> [2007-10-15 17:54]:> * Nico Golde: > > > Hi Ted, > > * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]: > >> ccontrol staticly links in dietlibc. I guess it should be added to the > >> list of packages with embedded code, unless static linking is handled > >> separately. > > > > BTW did you consider to use the shared library? > > Or linking against libc6, like everybody else on the planet? 8-)HAHA!!! too easy :) Cheers Nico -- Nico Golde - http://ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071015/d6fb556e/attachment.pgp
Moritz Muehlenhoff
2007-Oct-15 17:54 UTC
[Secure-testing-team] Embedded dietlibc in ccontrol
Florian Weimer wrote:> * Nico Golde: > > > Hi Ted, > > * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]: > >> ccontrol staticly links in dietlibc. I guess it should be added to the > >> list of packages with embedded code, unless static linking is handled > >> separately. > > > > BTW did you consider to use the shared library? > > Or linking against libc6, like everybody else on the planet? 8-)Indeed, linking against dietlibc should only be done for special cases like bootloader environments or such, glibc provides several security features missing in dietlibc or uclibc. Cheers, Moritz
Moritz Muehlenhoff wrote:>>> * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]: >>>> ccontrol statically links in dietlibc. I guess it should be added to the >>>> list of packages with embedded code, unless static linking is handled >>>> separately.>> Indeed, linking against dietlibc should only be done for special cases > like bootloader environments or such, glibc provides several security > features missing in dietlibc or uclibc.As of ccontrol 0.9.1+20071204-1, it is now dynamically linked with glibc on all platforms. Thanks for the suggestion :) -- \0