Re: nologin size

2012-02-16 Thread Jason Hellenthal
From the Makefile... # It is important that nologin be statically linked for security # reasons. A dynamic non-setuid binary can be linked against a trojan # libc by setting LD_LIBRARY_PATH appropriately. Both sshd(8) and # login(1) make it possible to log in with an unsanitized environment, #

nologin size

2012-02-15 Thread Ansar Mohammed
Hello all, I am trying to build a minimal size FreeBSD 9 installation and I noticed that the size of nologin is almost 200k. I built FreeBSD from source so I checked the distribution, and it's also 200k. So I went back to the source and just compiled nologin.c and it came up to 5k. Can anyone

Re: nologin size

2012-02-15 Thread Ansar Mohammed
You are right. Fast catch :) On Wed, Feb 15, 2012 at 2:39 PM, Simon si...@optinet.com wrote: Haven't checked into it, but quick guess static vs dynamic, stripped vs not stripped, check those first. You have likely compiled dynamic nologin. -Simon On Wed, 15 Feb 2012 14:28:54 -0500, Ansar

RE: nologin size

2012-02-15 Thread Devin Teske
-Original Message- From: owner-freebsd-hack...@freebsd.org [mailto:owner-freebsd- hack...@freebsd.org] On Behalf Of Ansar Mohammed Sent: Wednesday, February 15, 2012 11:29 AM To: freebsd-hackers@freebsd.org Subject: nologin size Hello all, I am trying to build a minimal size

Re: nologin size

2012-02-15 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/15/12 11:28, Ansar Mohammed wrote: Hello all, I am trying to build a minimal size FreeBSD 9 installation and I noticed that the size of nologin is almost 200k. I built FreeBSD from source so I checked the distribution, and it's also 200k.

Re: nologin size

2012-02-15 Thread Simon
Haven't checked into it, but quick guess static vs dynamic, stripped vs not stripped, check those first. You have likely compiled dynamic nologin. -Simon On Wed, 15 Feb 2012 14:28:54 -0500, Ansar Mohammed wrote: Hello all, I am trying to build a minimal size FreeBSD 9 installation and I