Stripped programs and shared libraries for DST 2007

[Morris Makuch]

Hi.

I ran the HP script dstivp which checks the O/S for 2007 DST readiness. I got 188 found stripped programs and shared libraries, mostly Oracle. Now I don't have a clue what stripped programs are and how to proceed on this. Any ideas?

[A. Clay Stephenson]

A "stripped" program is one on which, of all things, the "strip" command has been executed. It removes non-essential data from the program and thus reduces the size of the file and removes data from prying eyes for reverse engineering purposes. It's rather common to strip production code and is usually part of the makefile. Man strip and nm for details. As it pertains to you, the very data needed to make a determination for dst changes has been removed. It doesn't mean that the code is dst "unsafe" but it doesn't mean that it's "safe". There are insufficient data to make that call.

[Dennis Handly]

What symbols was dstivp looking for? For shared libs you can look at the dld symbol table.

>Clay: Man strip and nm

And ld(1) -s and -x.
For dld symbol tables, you need odump -slexport -slimport (PA32) and elfdump -s -n .dynsym.

>Clay: There are insufficient data to make that call.

Yes. If you are checking for RWZone and Place, one could make a binary pattern scanner.

[gbruner]

I have received this same problem with Oracle when running dstivp on my 11.23 servers.

When I run it on my 11.0 servers I get a different set of stripped programs:

/usr/admsnap/admsnapv2 no symbols
/usr/conf/modelstr no symbols
/usr/conf/reflash no symbols
/usr/etc/nfsstat no symbols
/usr/etc/rpcinfo no symbols
/usr/etc/rwall no symbols
/usr/etc/showmount no symbols
/usr/etc/spray no symbols
/usr/etc/ypserv no symbols

Not sure whether this presents a problem.

[Dennis Handly]

>Not sure whether this presents a problem.

Where did you get dstivp?

If it is looking for aC++ functions, I doubt those conf and /etc executables use aC++.

[gbruner]

I'm running version 15. It was sent to me and the others who attend HP DST Webinar last week.

[Morris Makuch]

Yes I got it off the Webinar also. I cannot find any info about stripped programs on Oracle's Metalink. Do I have anything to worry about?

[Dennis Handly]

>It was sent to me and the others who attend HP DST Webinar last week.

I saw a copy on another thread so I grabbed that.

>I cannot find any info about stripped programs on Oracle's Metalink. Do I have anything to worry about?

For Oracle, I don't think so. But if you don't know the owner, if it it is aC++, then you still have a big question mark.