3 ms·

Fastest way to identify hidden and dynamic configuration filenames: strace -f <executable-file> | grep openat Yeah, I was just looking at the biggest offe

Fastest way to identify hidden and dynamic configuration filenames: strace -f <executable-file> | grep openat Yeah, I was just looking at the biggest offender that I have encountered: Debian's update-ca-certificates, 37 hidden configuration files.

egberts1 3y ago
Details of hidden files opened by Debian's update-ca-certificates: https://egbert.net/blog/articles/ca-certificates-rebuild-on-debian.html https://egbert.net/blog/articles/ca-certificates-rebuild-on-... /etc/ca-certificates.conf file /usr/share/ca-certificates/* directory /usr/share/ca-certificates/mozilla/* directory /usr/share/ca-certificates// directory /usr/local/share/ca-certificates/* directory /usr/local/share/ca-certificates// directory /etc/ssl/certs directory $CWD/<all-certs-read-before> files /usr/lib/ssl/openssl.cnf file /etc/ca-certificates/update.d directory /etc/ca-certificates/update.d/jks-keystore directory /etc/default/cacerts directory /etc/java-11-openjdk/security/nss.cfg file /usr/share/ca-certificates-java directory /usr/lib/jvm/java-11-openjdk-amd64/lib/jvm.cfg file /usr/share/ca-certificates-java/ca-certificates-java.jar file /etc/ca-certificates/update.d/mono-keystore directory /etc/mono/4.5/machine.config file /etc/mono/assemblies/cert-sync/cert-sync.config file /etc/mono/assemblies/Mono.Security/Mono.Security.config file /etc/mono/assemblies/mscorlib/mscorlib.config file /etc/mono/assemblies/System/System.config file /etc/mono/config file /etc/ssl/certs/ca-certificates.crt file $HOME/.mono/config file /usr/lib/mono/4.5/cert-sync.exe.config file /usr/lib/mono/4.5/cert-sync.exe.config file /usr/lib/mono/4.5/mscorlib.dll.config file /usr/lib/mono/gac/Mono.Security/4.0.0.0_0738eb9f132ed765/Mono.Security.dll.config file /usr/lib/mono/gac/System/4.0.0.0__b77a5c561934e089/System.dll.config file /usr/share/.mono/certs/Trust/ski-*.cer file /usr/share/.mono/certs/new-certs/XXXXXXXX.0 file $CWD/openssl EXECUTABLE!!! (why look in $CWD?) /usr/bin/openssl /usr/local/bin/openssl /usr/local/sbin/openssl /usr/sbin/openssl (VERY STRANGE ordering of /usr/[local/][s]bin/
- efreak 3y ago
  > $CWD/openssl EXECUTABLE!!! (why look in $CWD?) debootstrap, maybe?

egberts1 3y ago

Details of hidden files opened by Debian's update-ca-certificates: https://egbert.net/blog/articles/ca-certificates-rebuild-on-debian.html https://egbert.net/blog/articles/ca-certificates-rebuild-on-... /etc/ca-certificates.conf file /usr/share/ca-certificates/* directory /usr/share/ca-certificates/mozilla/* directory /usr/share/ca-certificates// directory /usr/local/share/ca-certificates/* directory /usr/local/share/ca-certificates// directory /etc/ssl/certs directory $CWD/<all-certs-read-before> files /usr/lib/ssl/openssl.cnf file /etc/ca-certificates/update.d directory /etc/ca-certificates/update.d/jks-keystore directory /etc/default/cacerts directory /etc/java-11-openjdk/security/nss.cfg file /usr/share/ca-certificates-java directory /usr/lib/jvm/java-11-openjdk-amd64/lib/jvm.cfg file /usr/share/ca-certificates-java/ca-certificates-java.jar file /etc/ca-certificates/update.d/mono-keystore directory /etc/mono/4.5/machine.config file /etc/mono/assemblies/cert-sync/cert-sync.config file /etc/mono/assemblies/Mono.Security/Mono.Security.config file /etc/mono/assemblies/mscorlib/mscorlib.config file /etc/mono/assemblies/System/System.config file /etc/mono/config file /etc/ssl/certs/ca-certificates.crt file $HOME/.mono/config file /usr/lib/mono/4.5/cert-sync.exe.config file /usr/lib/mono/4.5/cert-sync.exe.config file /usr/lib/mono/4.5/mscorlib.dll.config file /usr/lib/mono/gac/Mono.Security/4.0.0.0_0738eb9f132ed765/Mono.Security.dll.config file /usr/lib/mono/gac/System/4.0.0.0__b77a5c561934e089/System.dll.config file /usr/share/.mono/certs/Trust/ski-*.cer file /usr/share/.mono/certs/new-certs/XXXXXXXX.0 file $CWD/openssl EXECUTABLE!!! (why look in $CWD?) /usr/bin/openssl /usr/local/bin/openssl /usr/local/sbin/openssl /usr/sbin/openssl (VERY STRANGE ordering of /usr/[local/][s]bin/

efreak 3y ago
> $CWD/openssl EXECUTABLE!!! (why look in $CWD?) debootstrap, maybe?