From owner-freebsd-security@FreeBSD.ORG  Wed Aug  6 10:02:47 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A7B0B37B401
	for <freebsd-security@freebsd.org>;
	Wed,  6 Aug 2003 10:02:47 -0700 (PDT)
Received: from travelers.mail.cornell.edu (travelers.mail.cornell.edu
	[132.236.56.13])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C833043FBF
	for <freebsd-security@freebsd.org>;
	Wed,  6 Aug 2003 10:02:46 -0700 (PDT)
	(envelope-from bks10@cornell.edu)
Received: from travelers.mail.cornell.edu (travelers.mail.cornell.edu
	[132.236.56.13])
	by travelers.mail.cornell.edu (8.9.3p2/8.9.3) with SMTP id NAA14118;
	Wed, 6 Aug 2003 13:02:43 -0400 (EDT)
Date: Wed, 6 Aug 2003 13:02:43 -0400 (EDT)
From: bks10@cornell.edu
X-Sender: bks10@travelers.mail.cornell.edu
To: Brian Kraemer <brian@etchings.com>
In-Reply-To: <20030806092431.O18916-100000@kosh.etchings.com>
Message-ID: <Pine.SOL.3.91.1030806130146.12164B-100000@travelers.mail.cornell.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-security@freebsd.org
Subject: Re: statically compiled files left over after a 'make world'
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Aug 2003 17:02:47 -0000

If you track 4-STABLE you have nothing to worry about anyway. The bug did 
not affect 4-STABLE, only 4.8, 4.7, etc...

Peace.

On Wed, 6 Aug 2003, Brian Kraemer wrote:

> Hello,
> 
> I recently did a 'make world' to update my base system due to the realpath
> bug. After that finished, I noticed that I still had the following
> statically compiled binaries laying around that did not get updated during
> a 'make world'. I track 4-STABLE.
> 
> /usr/bin/miniperl
> /sbin/mount_kernfs
> /sbin/mount_devfs
> /sbin/modunload
> /sbin/modload
> /sbin/ft
> /stand/boot_crunch
> /stand/find
> /stand/sed
> /stand/test
> /stand/pwd
> /stand/ppp
> /stand/newfs
> /stand/minigzip
> /stand/cpio
> /stand/bad144
> /stand/fsck
> /stand/ifconfig
> /stand/route
> /stand/slattach
> /stand/mount_nfs
> /stand/dhclient
> /stand/arp
> /stand/gzip
> /stand/gunzip
> /stand/zcat
> /stand/-sh
> /stand/[
> /stand/sh
> 
> Since they were not updated during a 'make world', does that mean that
> they are deprecated and can be safely removed?
> 
> If not, why weren't they updated during a 'make world'? Is it a security
> risk having them stick around since they haven't been re-linked against the
> new libc?
> 
> Thanks,
> 
> -Brian
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
>