FreeBSD Security Advisory FreeBSD-SA-05:21.openssl

Arne Wörner arne_woerner at yahoo.com
Wed Oct 12 00:12:37 PDT 2005


--- Colin Percival <cperciva at freebsd.org> wrote:
> Andrea Venturoli wrote:
> > FreeBSD Security Advisories wrote:
> >> Note that any statically linked applications that are not
> part of the
> >> base system (i.e. from the Ports Collection or other
> 3rd-party sources)
> >> must be recompiled.
> > 
> > Ok, is there any way to list installed ports which are
> statically linked
> > against OpenSSL?
> 
> There isn't any particularly good approach, unfortunately.  I
> think I'd
> probably use a combination of find(1), file(1), and fgrep(1) to
> find any
> executable files (via find) which are statically linked (using
> file) and
> which contain the string "OpenSSL" (using fgrep).
>
I would use a combination out of nm(1) and grep(1) instead of
fgrep(1). But I do not now right now, which symbol will always be
contained in a statically linked executable that might use
OpenSSL...

Btw: Why should the string "OpenSSL" be contained in each and
every executable, that might use OpenSSL?

-Arne



	
		
__________________________________ 
Yahoo! Mail - PC Magazine Editors' Choice 2005 
http://mail.yahoo.com


More information about the freebsd-security mailing list