From owner-freebsd-hackers@FreeBSD.ORG Fri Feb 17 05:12:51 2012 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 05EE7106564A for ; Fri, 17 Feb 2012 05:12:51 +0000 (UTC) (envelope-from jhellenthal@gmail.com) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id BAB6C8FC08 for ; Fri, 17 Feb 2012 05:12:50 +0000 (UTC) Received: by iaeo4 with SMTP id o4so5126006iae.13 for ; Thu, 16 Feb 2012 21:12:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to; bh=Lo9zZrOTkPxG+R/PlGK4o7NvIx1ZKEbNVVYD9/d80Cw=; b=moM1qFTNRMeeeN3pKfkwixFGG0DBUTaxQkiMp0xM1FgMRdekW6Std+90gEa//BXz29 WMUJtG33GVLLZO65WifDs6D0raQfCel94hZq3ny8eXKs5B8I5m8IPL0TAFVr/yzPwHYo MtScbqYlbgLVexO2bI8zofd/aFCk2yQX8T4eM= Received: by 10.50.85.231 with SMTP id k7mr21551389igz.25.1329455570192; Thu, 16 Feb 2012 21:12:50 -0800 (PST) Received: from DataIX.net (adsl-99-181-134-79.dsl.klmzmi.sbcglobal.net. [99.181.134.79]) by mx.google.com with ESMTPS id vr4sm4656719igb.1.2012.02.16.21.12.47 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 16 Feb 2012 21:12:48 -0800 (PST) Sender: Jason Hellenthal Received: from DataIX.net (localhost [127.0.0.1]) by DataIX.net (8.14.5/8.14.5) with ESMTP id q1H5Ci8U004975 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 17 Feb 2012 00:12:45 -0500 (EST) (envelope-from jhell@DataIX.net) Received: (from jhell@localhost) by DataIX.net (8.14.5/8.14.5/Submit) id q1H5CilH003093; Fri, 17 Feb 2012 00:12:44 -0500 (EST) (envelope-from jhell@DataIX.net) Date: Fri, 17 Feb 2012 00:12:44 -0500 From: Jason Hellenthal To: Ansar Mohammed Message-ID: <20120217051244.GA21997@DataIX.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="FCuugMFkClbJLl1L" Content-Disposition: inline In-Reply-To: Cc: freebsd-hackers@freebsd.org Subject: Re: nologin size X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Feb 2012 05:12:51 -0000 --FCuugMFkClbJLl1L Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =46rom the Makefile... # It is important that nologin be statically linked for security # reasons. A dynamic non-setuid binary can be linked against a trojan # libc by setting LD_LIBRARY_PATH appropriately. Both sshd(8) and # login(1) make it possible to log in with an unsanitized environment, # rendering a dynamic nologin binary virtually useless. NO_SHARED=3D YES On Wed, Feb 15, 2012 at 02:28:54PM -0500, Ansar Mohammed wrote: > Hello all, > I am trying to build a minimal size FreeBSD 9 installation and I > noticed that the size of nologin is almost 200k. > I built FreeBSD from source so I checked the distribution, and it's also = 200k. > So I went back to the source and just compiled nologin.c and it came up t= o 5k. >=20 > Can anyone explain why this executable is so large? > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" --=20 ;s =3D; --FCuugMFkClbJLl1L Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJPPeHLAAoJEJBXh4mJ2FR+hggIAJFzQolWpvbw2AmcPuQscHXz l0U3cU9v1k3y4EkaED8YgvMI11WISOR/VgjF8OzRbtIi1USgOnWuqMj+G85O8n6+ 4pBtA1zmVGYqdbuTEYLNEhUWj3XHAtkFq5UrHJ+DPx1FI/oikVTni2CXnIAxg5Tf QVySixyUIFH5k4bYjiv6p00o1TOskC5yJ1uZs9usAYHgRT9CvkfK/vnC8ldjjfc7 b1koBNObS/Y/d0WVkrJH65GqWcc6alHYmHz6uWDkPAXjLuRmv4lUr6Pgh87gmYrm 00feY9CuT97mNp3s2q3vMJPt5rmDPTUmRfqbQO8q8OuDFa/dJjJJl9P/BIPYB/4= =Mp/b -----END PGP SIGNATURE----- --FCuugMFkClbJLl1L--