Shared library permissions

Andrew Benton b3nt at ukonline.co.uk
Tue Aug 23 06:00:02 PDT 2005


Greg Schafer wrote:
> Matthew Burgess wrote:
> 
>> Does anyone know why shared libraries need the execute bit set on them? 
> 
> AFAICT they don't need it (except of course libc.so.6 and ld-linux.so.2).
> Debian ship a whole distro with the shared libs all 644 (apart from those
> 2 aforementioned libs).
> 

My experience has been that 644 works fine for shared libs. But it's not good enough to simply do

find /usr/lib -type f -exec chmod 644 {} \;


It breaks several apps that install executables in /usr/lib (eg gcc, cups, the Gimp). Also, there are many files in /usr/lib/perl5 that are set read only so moving them to 644 makes them more unsafe



More information about the lfs-dev mailing list