From owner-freebsd-questions@FreeBSD.ORG Wed Nov 26 16:49:14 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2B9EB1065670; Wed, 26 Nov 2008 16:49:14 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id 95A148FC08; Wed, 26 Nov 2008 16:49:13 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.3/8.14.3) with ESMTP id mAQGn84R018080; Wed, 26 Nov 2008 16:49:08 GMT (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.7.2 smtp.infracaninophile.co.uk mAQGn84R018080 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infracaninophile.co.uk; s=200708; t=1227718148; bh=mINYRp/j+zU9xI TH74+9x4r3U3lj7SyNySVonHEluTw=; h=Message-ID:Date:From:MIME-Version: To:CC:Subject:References:In-Reply-To:Content-Type:Cc:Content-Type: Date:From:In-Reply-To:Message-ID:Mime-Version:References:To; z=Mes sage-ID:=20<492D7E03.3070500@infracaninophile.co.uk>|Date:=20Wed,=2 026=20Nov=202008=2016:49:07=20+0000|From:=20Matthew=20Seaman=20|Organization:=20Infracaninophile|User -Agent:=20Thunderbird=202.0.0.18=20(X11/20081125)|MIME-Version:=201 .0|To:=20Kris=20Kennaway=20|CC:=20Wojciech=20Puch ar=20,=20=0D=0A=20Masoom=20Shaikh=2 0,=0D=0A=20freebsd-questions@freebsd.org|S ubject:=20Re:=20large=20binary,=20why=20not=20strip=20?|References: =20=09< 20081116125622.E24752@wojtek.tensor.gdynia.pl>=09<20081117172100.GB 43367@hub.freebsd.org>=09=09<20081117210649.GE63818@hub.freebsd.org>=20<4 9226AFD.6060505@infracaninophile.co.uk>|In-Reply-To:=20<49226AFD.60 60505@infracaninophile.co.uk>|X-Enigmail-Version:=200.95.6|Content- Type:=20multipart/signed=3B=20micalg=3Dpgp-sha256=3B=0D=0A=20protoc ol=3D"application/pgp-signature"=3B=0D=0A=20boundary=3D"----------- -enigFE585E26E12C52B51A7840D0"; b=IN/M06j4JXz6g8BO8XNk9vyCmInKR28pA qx8Ytg+fh0iuRkhllFAl1Av9lDjzA44In1pWf0BweaHGrP0x7nxhsAB0XF/ztRN+mmK jEE5/icETy8ucxHUzvkrRj4pEHlpzwJYOxuEwRgBlckppiOAoXG2LsbiGflFb17Zzj+ afb8= Message-ID: <492D7E03.3070500@infracaninophile.co.uk> Date: Wed, 26 Nov 2008 16:49:07 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 2.0.0.18 (X11/20081125) MIME-Version: 1.0 To: Kris Kennaway References: <20081116125622.E24752@wojtek.tensor.gdynia.pl> <20081117172100.GB43367@hub.freebsd.org> <20081117210649.GE63818@hub.freebsd.org> <49226AFD.6060505@infracaninophile.co.uk> In-Reply-To: <49226AFD.6060505@infracaninophile.co.uk> X-Enigmail-Version: 0.95.6 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigFE585E26E12C52B51A7840D0" X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0.1 (smtp.infracaninophile.co.uk [IPv6:::1]); Wed, 26 Nov 2008 16:49:08 +0000 (GMT) X-Virus-Scanned: ClamAV 0.94.1/8683/Wed Nov 26 06:58:25 2008 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VERIFIED,NO_RELAYS autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on happy-idiot-talk.infracaninophile.co.uk Cc: Wojciech Puchar , Masoom Shaikh , freebsd-questions@freebsd.org Subject: Re: large binary, why not strip ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Nov 2008 16:49:14 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigFE585E26E12C52B51A7840D0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Matthew Seaman wrote: > Kris Kennaway wrote: >=20 >> Bonus points if you come up with a patch to do this: in most cases it >> will be a simple matter of changing the port's do-install: target to >> use INSTALL_* macros instead of cp/bsdtar etc. This would be a good >> project to get some familiarity with the ports tree. >=20 > Would it be worthwhile to add a test and warning that all installed=20 > binaries > have not been stripped to the 'security-check' target in bsd.port.mk? = > That's > not really what that target was intended for (feeping creaturism alert!= )=20 > but > it's the obvious place to put such a test. >=20 > Probably cleaner to create a whole new target, but that's going to=20 > duplicate > some code. >=20 > Hmmmm... I shall work up some patches, probably over the weekend, so=20 > there's > something substantive to talk about. Done: ports/129210 For the record, I also discovered that, contrary to what I said earlier, there is apparently one class of binary object that will not work correc= tly if stripped: kernel loadable modules. As others have commented, most shlibs installed from ports aren't strippe= d. The same applies to almost any sort of pluggable module (perl, PHP etc.) = that I have been able to investigate. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enigFE585E26E12C52B51A7840D0 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREIAAYFAkktfgMACgkQ8Mjk52CukIzUGwCfdPek2SsPcBfJB0WEbbi31iaE 88oAnRSzA8DWYB70jE//bd+NNfcsDUHV =fPyg -----END PGP SIGNATURE----- --------------enigFE585E26E12C52B51A7840D0--