Quickly move an executable between systems with ELF Statifier
Posted by: Anonymous
[ip: 88.73.226.69]
on October 23, 2008 03:03 PM
Some comments:
1. Environment: Statifier does not set environment variables for the statified executable.
It just allows one to specify them during statifying process to influence linking (think LD_BIND_NOW, LD_LIBRARY_PATH, LD_PRELOAD, etc). Any of those environment variables set at runtime will be passed through to the executable without modification.
2) Randomization: the statified executable fails, but the commercial alternative Ermine (http://www.magicermine.com/) uses a different approach that works with memory randomization.
Thus there's no need for root access
3) On the ls example:
This program uses libnss_* libraries. When statified as in the article those libraries will
not be packed. Consequently moving the executables to the target system can be a problem.
The correct way to pack such executable is to specify ALL /lib/libnss* libraries with -eLD_PRELOAD.
Ermine supports this with the switch --with-nss='internal'.
Learn about Linux
Download Linux
Get Linux help
Quickly move an executable between systems with ELF Statifier
Posted by: Anonymous [ip: 88.73.226.69] on October 23, 2008 03:03 PM1. Environment: Statifier does not set environment variables for the statified executable.
It just allows one to specify them during statifying process to influence linking (think LD_BIND_NOW, LD_LIBRARY_PATH, LD_PRELOAD, etc). Any of those environment variables set at runtime will be passed through to the executable without modification.
2) Randomization: the statified executable fails, but the commercial alternative Ermine (http://www.magicermine.com/) uses a different approach that works with memory randomization.
Thus there's no need for root access
3) On the ls example:
This program uses libnss_* libraries. When statified as in the article those libraries will
not be packed. Consequently moving the executables to the target system can be a problem.
The correct way to pack such executable is to specify ALL /lib/libnss* libraries with -eLD_PRELOAD.
Ermine supports this with the switch --with-nss='internal'.
#