Re: [sleuthkit-users] Perl Binary that Autopsy should use in Live Analysis?

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Jun 7, 2004, at 5:55 AM, Surago Jones wrote:

> When using the Autopsy browser on a Live Analysis, my understanding is
> that Autopsy requires Perl, however I am unable to provide a statically
> linked Perl binary (I just can't get the *^#$&^#$ to compile
> statically), and when using a Dynamically linked file, does this not
> require library files on the live system to be accessed?

Yea it does.  I entered this as bug 919831 when it was released.  I 
don't know the best way around this and it is an open problem. In 
reality, there is a risk of running any program (even if it is static), 
so it will never be 100% safe, but I agree that there must be a better 
way than what autopsy currently does.  I have tried playing with 
getting Perl to compile statically and, like you, did not have much 
luck.  Some OSes, such as OS X, refuse to make any static executables.  
I also want to look into placing more of the Perl libraries on the CD 
so that it uses its local copies instead of the ones from the suspect 
system.

I have had luck with the trial version of perl2exe, but I do not own a 
full version.


brian



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAxIG6OK1gLsdFTIsRAuhtAJ4lUsjVXI56KUHyoTvVWOBNz4yEXQCeOEWd
+HEG6SO7sN+t9qwNAenkbRk=
=7iIf
-----END PGP SIGNATURE-----