...

...

On 5/26/2009 at 17:25, Michael Matz wrote: Of course, shared libraries are executeable.

Some can (and should) be, and indeed you have given the only two examples (ld-usb* and libpthread in addition, but that again is glibc). That's why that hint is in the "Best practice" sections, and not a policy. Because indeed, most shared libraries are _not_ executable, which should be reflected by their permissions. For being a shared lib they don't need to be marked 755.

Wondering how much this policy (best practice) is applied on our distribution: # /usr/lib64> ls -lad lib* | grep "^[^l]rwx" | wc -l 1063 # /usr/lib64> ls -lad lib* | grep "^[^l]rw-" | wc -l 202 so I have 5x as many executable libs than others ;) Dominique -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org

Le mardi 26 mai 2009, à 18:11 +0200, Michael Matz a écrit :

Hi,

On Tue, 26 May 2009, Dominique Leuenberger wrote:

...

...

...

...

On 5/26/2009 at 17:25, Michael Matz wrote: Of course, shared libraries are executeable.

Some can (and should) be, and indeed you have given the only two examples (ld-usb* and libpthread in addition, but that again is glibc). That's why that hint is in the "Best practice" sections, and not a policy. Because indeed, most shared libraries are _not_ executable, which should be reflected by their permissions. For being a shared lib they don't need to be marked 755.

Wondering how much this policy (best practice) is applied on our distribution:

Yep, that's a problem. We hoped by documenting this as best practice over time the distro will catch up :)

...

# /usr/lib64> ls -lad lib* | grep "^[^l]rwx" | wc -l 1063 # /usr/lib64> ls -lad lib* | grep "^[^l]rw-" | wc -l 202

... and it seems we slowly succeed. Some years ago nearly all shared libs were 755 ;)

Isn't this something that should just get fixed upstream in some of the autotools? We'd then get the right thing for free in most packages. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org

Hi, On Tue, 26 May 2009, Cristian Rodríguez wrote:

Dominique Leuenberger escribió:

...

Wondering how much this policy (best practice) is applied on our distribution: # /usr/lib64> ls -lad lib* | grep "^[^l]rwx" | wc -l 1063 # /usr/lib64> ls -lad lib* | grep "^[^l]rw-" | wc -l 202

ls -lad lib* | grep "^[^l]rw-" | wc -l 694

Now, how many of those are *.a or *.la? :-) # ls -lad lib*.so* | grep "^[^l]rw-" | wc -l 40 Och :-) Ciao, Michael.

On Wed, May 27, Dominique Leuenberger wrote:

9 files non-executable are *.so files (interestingly enough, not links -rw-r--r-- 1 root root 253 2009-05-19 09:13 libc.so

Yes, this are ld scripts: kukuk@firun:~> cat /usr/lib/libc.so /* GNU ld script Use the shared library, but some functions are only in the static library, so try that secondarily. */ OUTPUT_FORMAT(elf32-i386) GROUP ( /lib/libc.so.6 /usr/lib/libc_nonshared.a AS_NEEDED ( /lib/ld-linux.so.2 ) ) -- Thorsten Kukuk, Project Manager/Release Manager SLES SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org