On Sat, Jul 20, 2024 at 5:50 AM Thomas Schmitt <scdbac...@gmx.net> wrote: > > Van Snyder wrote: > > And there's still the mystery why a statically-linked executable wants to > > load a shared object library. > > I doubt that it is possible to make a purely statical binary with no > references to .any so libraries. > (If it were generally possible, why then exist Flatpack and Snap ?) > > Check by program "ldd" which dynamic dependencies the binary has: > > ldd ./LinuxSusser
You might want to use `libtree <module>, `readelf -d <module> | grep NEEDED` or `objdump -p <module> | grep NEEDED` instead. They do not suffer ldd shortcomings. Also see CVE-2009-5064, and <https://jmmv.dev/2023/07/ldd-untrusted-binaries.html>. Jeff
