Hi all, I am currently trying to work on some tools for solaris forensic investigation. One of the main problem I am facing is how to create trusted binaries for live memory dump, since Solaris 10 is no longer capable of static linking.
So far the alternatives I have come up with is compile tools that is set to specify my own library path, which I am successful. However at the end of the day, I am still faced with issues in which libc.so.1 and libmd.so.1 still link to solaris' default base folders, probably because these two shared libraries are built to set to link to /platform or /lib. For example, below is the results for memdump which I have compiled, notice it calls forth /platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1. It is there anyway I can modify the linking process to not utilize the default location, rather one in which I can specify? The best would be something like linking to /my/own/location/for/libc_psr.so.1 bash-3.00# ldd -v memdump find object=libc.so.1; required by memdump libc.so.1 => /mnt/s_10/usr/lib/libc.so.1 find version=libc.so.1 libc.so.1 (SUNW_0.7) => /mnt/s_10/usr/lib/libc.so.1 object=/mnt/s_10/usr/lib/libc.so.1; filter for /usr/lib/ld.so.1 object=/mnt/s_10/usr/lib/libc.so.1; filter for libm.so.2 find object=libm.so.2; required by /mnt/s_10/usr/lib/libc.so.1 libm.so.2 => /mnt/s_10/usr/lib/libm.so.2 find object=libc.so.1; required by /mnt/s_10/usr/lib/libm.so.2 find version=libc.so.1 libc.so.1 (SUNW_0.7) => /mnt/s_10/usr/lib/libc.so.1 libc.so.1 (SUNWprivate_1.1) => /mnt/s_10/usr/lib/libc.so.1 object=/mnt/s_10/usr/lib/libc.so.1; filter for /platform/$PLATFORM/lib/libc_psr.so.1 find object=/platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1; required by /mnt/s_10/usr/lib/libc.so.1 /platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1 Message was edited by: hanning -- This message posted from opensolaris.org