News for hackers. Stuff that matters.
Re:Never run ldd on unknown executables by eqvinox on Sunday July 23, 2023 @07:22PM (#36841047)
recommended workaround: use lddtree (part of pax-utils)

The output is actually more informative too:

  $ lddtree `which ssh`
  /usr/bin/ssh (interpreter => /lib64/ld-linux-x86-64.so.2)
      libselinux.so.1 => /lib/x86_64-linux-gnu/libselinux.so.1
          libpcre2-8.so.0 => /lib/x86_64-linux-gnu/libpcre2-8.so.0
      libgssapi_krb5.so.2 => /lib/x86_64-linux-gnu/libgssapi_krb5.so.2
          libkrb5.so.3 => /lib/x86_64-linux-gnu/libkrb5.so.3
              libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1
              libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
          libk5crypto.so.3 => /lib/x86_64-linux-gnu/libk5crypto.so.3
          libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2
          libkrb5support.so.0 => /lib/x86_64-linux-gnu/libkrb5support.so.0
      libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3
      libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1
      libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6
vs.

  $ ldd `which ssh`    
          linux-vdso.so.1 (0x00007fff7972e000)
          libselinux.so.1 => /lib/x86_64-linux-gnu/libselinux.so.1 (0x00007f1a0030c000)
          libgssapi_krb5.so.2 => /lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f1a002ba000)
          libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3 (0x00007f19ffe00000)
          libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f1a0029b000)
          libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f19ffc1e000)
          libpcre2-8.so.0 => /lib/x86_64-linux-gnu/libpcre2-8.so.0 (0x00007f19ffb84000)
          /lib64/ld-linux-x86-64.so.2 (0x00007f1a00499000)
          libkrb5.so.3 => /lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007f19ffaaa000)
          libk5crypto.so.3 => /lib/x86_64-linux-gnu/libk5crypto.so.3 (0x00007f19ffa7d000)
          libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2 (0x00007f1a00293000)
          libkrb5support.so.0 => /lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007f1a00285000)
          libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1 (0x00007f19ffa76000)
          libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f19ffa65000)

(lddtree opens the files as plain binaries and reads the ELF linking data, it does not execute any code from the files being inspected.)
Re:Never run ldd on unknown executables by QuantumG on Sunday July 23, 2023 @09:26PM (#36841956)
These days I tend to use $() over backticks, anyone wanna fight me on it?
Re:Never run ldd on unknown executables by casey2 on Sunday July 23, 2023 @10:17PM (#36842339)
For me, it's `{} Directly giving `cmd for free.