SYD-LDD(1) General Commands Manual SYD-LDD(1)

syd-ldd - Print shared object dependencies in a secure way

syd-ldd [option]... file...

The syd-ldd utility is meant to be used as a secure alternative to ldd(1). It creates a syd sandbox and runs ldd(1) under it with restricted privileges.

syd-ldd utility is equivalent to invoking the following command:

syd
	-pimmutable
	-msandbox/read:on
	-msandbox/stat:off
	-msandbox/exec:on
	-msandbox/write:on
	-msandbox/net:on
	-msandbox/lock:on
	-mallow/read+/etc/ld-*.path
	-mallow/read+/etc/locale.alias
	-mallow/read+/usr/share/locale*/**/*.mo
	-mallow/read+/usr/share/locale*/locale.alias
	-mallow/read+/usr/lib*/locale*/locale-archive
	-mallow/read+/usr/lib*/**/gconv-modules*
	-mallow/read+/usr/**/LC_{ALL,COLLATE,CTYPE,IDENTIFICATION,MESSAGES}
	-mallow/read+/**/*.so.[0-9]*
	-mallow/exec+/lib/**/ld-linux*.so.[0-9]
	-mallow/exec+/usr/lib*/**/ld-linux*.so.[0-9]
	-mallow/write+/dev/null
	-mallow/lock/read+/
	-mallow/lock/write+/dev/null
	-mallow/read,write+/dev/tty
	-mallow/read,exec+/path/to/ldd
	/path/to/ldd -- args...

syd(1), syd(2), syd(5), ldd(1)

syd homepage: https://sydbox.exherbo.org/

Maintained by Ali Polatel. Up-to-date sources can be found at https://gitlab.exherbo.org/sydbox/sydbox.git and bugs/patches can be submitted to https://gitlab.exherbo.org/groups/sydbox/-/issues. Discuss in #sydbox on Libera Chat or in #sydbox:mailstation.de on Matrix.

2025-11-14