Hi all,

I am currently trying to work on some tools for solaris forensic investigation. 
 One of the main problem I am facing is how to create trusted binaries for live 
memory dump, since Solaris 10 is no longer capable of static linking.

So far the alternatives I have come up with is compile tools that is set to 
specify my own library path, which I am successful.  However at the end of the 
day, I am still faced with issues in which libc.so.1 and libmd.so.1 still link 
to solaris' default base folders, probably because these two shared libraries 
are built to set to link to /platform or /lib.

For example, below is the results for memdump which I have compiled, notice it 
calls forth /platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1.  It is 
there anyway I can modify the linking process to not utilize the default 
location, rather one in which I can specify?  The best would be something like 
linking to /my/own/location/for/libc_psr.so.1

bash-3.00# ldd -v memdump

   find object=libc.so.1; required by memdump
        libc.so.1 =>     /mnt/s_10/usr/lib/libc.so.1
   find version=libc.so.1
        libc.so.1 (SUNW_0.7) =>  /mnt/s_10/usr/lib/libc.so.1

   object=/mnt/s_10/usr/lib/libc.so.1; filter for /usr/lib/ld.so.1

   object=/mnt/s_10/usr/lib/libc.so.1; filter for libm.so.2

   find object=libm.so.2; required by /mnt/s_10/usr/lib/libc.so.1
        libm.so.2 =>     /mnt/s_10/usr/lib/libm.so.2

   find object=libc.so.1; required by /mnt/s_10/usr/lib/libm.so.2
   find version=libc.so.1
        libc.so.1 (SUNW_0.7) =>  /mnt/s_10/usr/lib/libc.so.1
        libc.so.1 (SUNWprivate_1.1) =>   /mnt/s_10/usr/lib/libc.so.1

   object=/mnt/s_10/usr/lib/libc.so.1; filter for 
/platform/$PLATFORM/lib/libc_psr.so.1

   find object=/platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1; 
required by /mnt/s_10/usr/lib/libc.so.1
        /platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1

Message was edited by: hanning
-- 
This message posted from opensolaris.org

Reply via email to