.\" Generated by scdoc 1.11.3
.\" Complete documentation for this program is not available as a GNU info page
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.nh
.ad l
.\" Begin generated content:
.TH "SYD-LDD" "1" "2025-02-14"
.PP
.SH NAME
.PP
syd-ldd - print shared object dependencies in a secure way
.PP
.SH SYNOPSIS
.PP
\fBsyd-ldd\fR \fI[option].\&.\&.\&\fR \fIfile.\&.\&.\&\fR
.PP
.SH DESCRIPTION
.PP
The \fBsyd-ldd\fR utility is meant to be used as a secure alternative to \fIldd\fR(1).\&
It creates a syd sandbox and runs \fIldd\fR(1) under it with restricted
privileges.\&
.PP
.SH INVOCATION
.PP
\fBsyd-ldd\fR utility is equivalent to invoking the following command:
.PP
.nf
.RS 4
syd
	-pimmutable
	-msandbox/read:on
	-msandbox/stat:off
	-msandbox/exec:on
	-msandbox/write:on
	-msandbox/net:on
	-msandbox/lock:on
	-mallow/read+/etc/ld-*\&.path
	-mallow/read+/etc/locale\&.alias
	-mallow/read+/usr/share/locale*/**/*\&.mo
	-mallow/read+/usr/share/locale*/locale\&.alias
	-mallow/read+/usr/lib*/locale*/locale-archive
	-mallow/read+/usr/lib*/**/gconv-modules*
	-mallow/read+/usr/**/LC_{ALL,COLLATE,CTYPE,IDENTIFICATION,MESSAGES}
	-mallow/read+/**/*\&.so\&.[0-9]*
	-mallow/exec+/lib/**/ld-linux*\&.so\&.[0-9]
	-mallow/exec+/usr/lib*/**/ld-linux*\&.so\&.[0-9]
	-mallow/write+/dev/null
	-mallow/lock/read+/
	-mallow/lock/write+/dev/null
	-mallow/read,write+/dev/tty
	-mallow/read,exec+/path/to/ldd
	/path/to/ldd -- args\&.\&.\&.
.fi
.RE
.PP
.SH SEE ALSO
.PP
\fIsyd\fR(1), \fIsyd\fR(2), \fIsyd\fR(5), \fIldd\fR(1)
.PP
\fBsyd\fR homepage: https://sydbox.\&exherbolinux.\&org/
.PP
.SH AUTHORS
.PP
Maintained by Ali Polatel.\& Up-to-date sources can be found at
https://gitlab.\&exherbo.\&org/sydbox/sydbox.\&git and bugs/patches can be
submitted to https://gitlab.\&exherbo.\&org/groups/sydbox/-/issues.\& Discuss
in #sydbox on Libera Chat.\&