From 1f7db2e0d23659545016963a44b6a69836151b8e Mon Sep 17 00:00:00 2001 From: Jacob Latonis Date: Tue, 17 Dec 2024 19:53:12 -0500 Subject: [PATCH] docs: fix rpaths example --- site/content/blog/leveraging-macho-module/index.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/site/content/blog/leveraging-macho-module/index.md b/site/content/blog/leveraging-macho-module/index.md index 7903612d..201a9419 100644 --- a/site/content/blog/leveraging-macho-module/index.md +++ b/site/content/blog/leveraging-macho-module/index.md @@ -122,8 +122,9 @@ import "macho" rule rpath_iter { condition: - for any rpath in rpaths: + for any rpath in rpaths: ( rpath contains "lib/swift/macosx" + ) } ``` @@ -146,7 +147,7 @@ To iterate through the dylibs loaded in the Mach-O binary, one can iterate throu ```yara import "macho" -rule libsystem_use { +rule library_dylib_location { condition: for any d in macho.dylibs: ( d.name contains "/Library/"