Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 01:59:04, Warren Block wrote: On Wed, 16 Jun 2010, Warren Block wrote: ln -s libintl.so.9 libintl.so.8 has been misused a lot lately. Are there any programs that will detect these links and remind the user that they have a new

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 08:34:52, Matthew Seaman wrote: On 17/06/2010 01:59:04, Warren Block wrote: On Wed, 16 Jun 2010, Warren Block wrote: ln -s libintl.so.9 libintl.so.8 has been misused a lot lately. Are there any programs that will detect these

Re: Detecting fake library versions

2010-06-17 Thread Jonathan McKeown
On Thursday 17 June 2010 09:39:37 Matthew Seaman wrote: But what about hard links? I hear you ask. Simple: find /usr/lib /lib -name '*.so.*' -links +2 +1 surely? + modifier in find(1) means ``more than'', not ``at least''. Jonathan ___

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 09:16:33, Jonathan McKeown wrote: On Thursday 17 June 2010 09:39:37 Matthew Seaman wrote: But what about hard links? I hear you ask. Simple: find /usr/lib /lib -name '*.so.*' -links +2 +1 surely? + modifier in find(1) means

Re: Detecting fake library versions

2010-06-17 Thread Warren Block
On Thu, 17 Jun 2010, Matthew Seaman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 01:59:04, Warren Block wrote: On Wed, 16 Jun 2010, Warren Block wrote: ln -s libintl.so.9 libintl.so.8 has been misused a lot lately. Are there any programs that will detect these links

Re: Detecting fake library versions

2010-06-17 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 16:04:20, Warren Block wrote: This is not generally true for shlibs installed from ports, mostly due to the prevalence of linuxisms like ABI version numbers that aren't simple integers. Even so, applying a little intelligent scrutiny

Re: Detecting fake library versions

2010-06-17 Thread Warren Block
On Thu, 17 Jun 2010, Matthew Seaman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/06/2010 16:04:20, Warren Block wrote: This is not generally true for shlibs installed from ports, mostly due to the prevalence of linuxisms like ABI version numbers that aren't simple integers.

Detecting fake library versions

2010-06-16 Thread Warren Block
ln -s libintl.so.9 libintl.so.8 has been misused a lot lately. Are there any programs that will detect these links and remind the user that they have a new library masquerading as an old one? -Warren Block * Rapid City, South Dakota USA ___

Re: Detecting fake library versions

2010-06-16 Thread Warren Block
On Wed, 16 Jun 2010, Warren Block wrote: ln -s libintl.so.9 libintl.so.8 has been misused a lot lately. Are there any programs that will detect these links and remind the user that they have a new library masquerading as an old one? A quick hack in Ruby to address this: