Date: Fri, 17 Feb 2012 00:12:44 -0500 From: Jason Hellenthal <jhell@DataIX.net> To: Ansar Mohammed <ansarm@gmail.com> Cc: freebsd-hackers@freebsd.org Subject: Re: nologin size Message-ID: <20120217051244.GA21997@DataIX.net> In-Reply-To: <CAOO1MfsEa2E-4afrcNrOCvA0SjXt%2BgOFeLMSnbeR-9=Gpv8ZVw@mail.gmail.com> References: <CAOO1MfsEa2E-4afrcNrOCvA0SjXt%2BgOFeLMSnbeR-9=Gpv8ZVw@mail.gmail.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] From the Makefile... # It is important that nologin be statically linked for security # reasons. A dynamic non-setuid binary can be linked against a trojan # libc by setting LD_LIBRARY_PATH appropriately. Both sshd(8) and # login(1) make it possible to log in with an unsanitized environment, # rendering a dynamic nologin binary virtually useless. NO_SHARED= YES On Wed, Feb 15, 2012 at 02:28:54PM -0500, Ansar Mohammed wrote: > Hello all, > I am trying to build a minimal size FreeBSD 9 installation and I > noticed that the size of nologin is almost 200k. > I built FreeBSD from source so I checked the distribution, and it's also 200k. > So I went back to the source and just compiled nologin.c and it came up to 5k. > > Can anyone explain why this executable is so large? > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" -- ;s =; [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJPPeHLAAoJEJBXh4mJ2FR+hggIAJFzQolWpvbw2AmcPuQscHXz l0U3cU9v1k3y4EkaED8YgvMI11WISOR/VgjF8OzRbtIi1USgOnWuqMj+G85O8n6+ 4pBtA1zmVGYqdbuTEYLNEhUWj3XHAtkFq5UrHJ+DPx1FI/oikVTni2CXnIAxg5Tf QVySixyUIFH5k4bYjiv6p00o1TOskC5yJ1uZs9usAYHgRT9CvkfK/vnC8ldjjfc7 b1koBNObS/Y/d0WVkrJH65GqWcc6alHYmHz6uWDkPAXjLuRmv4lUr6Pgh87gmYrm 00feY9CuT97mNp3s2q3vMJPt5rmDPTUmRfqbQO8q8OuDFa/dJjJJl9P/BIPYB/4= =Mp/b -----END PGP SIGNATURE-----help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120217051244.GA21997>
