> My Ubuntu /usr/sbin/sshd already links to libz, liblzma, liblz4 and libzstd. E... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jwilk on May 1, 2024 | parent | context | favorite | on: Run0, a systemd based alternative to sudo, announc...

> My Ubuntu /usr/sbin/sshd already links to libz, liblzma, liblz4 and libzstd.

Except for libz, they are only linked indirectly through libsystemd.

> I don't see why linking to libxz would be so outrageous

The XZ Utils library is called liblzma, not libxz.

tommiegannert on May 1, 2024 [–]

> Except for libz, they are only linked indirectly though libsystemd.

Ah, that invalidates my point re. obscure test data. Sloppy use of ldd. (I'm guessing it would be much harder making such an attack on a crypto library.)

Thanks.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact