#1145186 coreutils: provide a coreutils-static version with no shared libs to detect malware like sedex

Package:
coreutils
Source:
coreutils
Description:
GNU core utilities
Submitter:
Date:
2026-08-23 17:03:02 UTC
Severity:
normal
#1145186#5
Date:
2026-08-23 17:00:58 UTC
From:
To:
Dear Maintainer,

=============================================================================

   * What led up to the situation?
   A malware program named sedex (or sedexp) avoids detection by
   manipulating dynamic memory and shared libs so that utils like ls
   will not display its files.

   It would be helpful to have a version of coreutils package built only
   with static libraries so the presence of this malware could be found
   without having to boot from a live CD and search the system.

   In the interim, one can download the coreutils source and add flags
   to ./configure LDFLAGS="..." to build with only static libraries  but
   this is clumsy and does not keep up with new coreutils versions.

=============================================================================