why do have shared libs 755 perms?

[Mateusz Marzantowicz]

On 10.05.2013 20:57, Reindl Harald wrote:
> why have .so files of fedora-packages executeable permissions?
> they are not executeable, see below the difference of my personal
> builds with files from fedora packages (the original httpd and
> php packages have also 755)
>
> you get even segfaults by try to execute such files
> [harry at srv-rhsoft:~]$ /usr/lib64/httpd/modules/mod_fcgid.so
> Speicherzugriffsfehler
>
> [root at srv-rhsoft:~]$ ls /usr/lib64/httpd/modules/
> insgesamt 6,5M
> -rw-r--r-- 1 root root 4,9M 2013-05-09 12:13 libphp5.so
> -rw-r--r-- 1 root root  10K 2013-05-10 16:06 mod_actions.so
> -rw-r--r-- 1 root root  10K 2013-05-10 16:06 mod_asis.so
> -rwxr-xr-x 1 root root  20K 2013-04-10 10:47 mod_authz_svn.so
> -rwxr-xr-x 1 root root  24K 2013-03-19 21:46 mod_bw.so
> -rw-r--r-- 1 root root  26K 2013-05-10 16:06 mod_cgi.so
> -rw-r--r-- 1 root root 110K 2013-05-10 16:06 mod_dav.so
> -rwxr-xr-x 1 root root 172K 2013-04-10 10:48 mod_dav_svn.so
> -rwxr-xr-x 1 root root  16K 2013-04-10 10:47 mod_dontdothat.so
> -rwxr-xr-x 1 root root 100K 2012-07-21 02:20 mod_fcgid.so
> -rwxr-xr-x 1 root root  12K 2013-03-19 21:54 mod_flvx.so
> -rw-r--r-- 1 root root  79K 2013-04-20 00:42 mod_h264_streaming.so
> -rw-r--r-- 1 root root  31K 2013-05-10 16:06 mod_info.so
> -rw-r--r-- 1 root root  30K 2013-05-10 16:06 mod_mime_magic.so
> -rw-r--r-- 1 root root  38K 2013-05-10 16:06 mod_proxy_http.so
> -rw-r--r-- 1 root root 107K 2013-05-10 16:06 mod_proxy.so
> -rw-r--r-- 1 root root 575K 2013-05-06 15:56 mod_security2.so
> -rw-r--r-- 1 root root 223K 2013-05-10 16:06 mod_ssl.so
> -rw-r--r-- 1 root root  22K 2013-05-10 16:06 mod_status.so

I've found this two links with some explanation:

*
http://unix.stackexchange.com/questions/40587/why-are-shared-libraries-executable
*
http://serverfault.com/questions/173853/why-shared-libraries-on-linux-are-executable

I can confirm that in Debian shared libs are not marked as executable
(most of them). Maybe Fedora/RHEL make use of some form of protection
which requires executable bit to be set on .so?


Mateusz Marzantowicz