seungkang / oki Goto Github PK

When using -R to generate unveil rules for dependent libraries, program returns an error if the imported library is a file path. Not sure how common it is for an imported library to be a file path but it occurs with the rizin package.

Example:

$ oki -R rizin
fatal: failed to get ELF dependencies unveil paths - imported library contains / - /usr/local/lib/<some-library>

Possible Fixes

Adding support for libraries that are file paths, so long as they are prefixed with the paths in the runPaths variable. We need to call filepath.Clean() and filepath.Abs() on both the runPaths variable and the imported library if it is a file path.

Ran -R on git and returned with error:

$ oki -R git
fatal: failed to get ELF dependencies unveil paths - could not find library: "libiconv.so.7.1" - searched in ["/usr/lib"]

Library is in /usr/local/lib.

$ find /usr -type f -name libiconv.so.7.1
/usr/local/lib/libiconv.so.7.1

Possible Fixes

We want to check if /usr/local/lib is in git's DT_RUNPATH or any of its libraries' DT_RUNPATH.
If it isn't, we should consider checking there by default.
We should review how ld.so works and read manual page. (man ld.so)