Subject: Re: HEADS UP: migration to fully dynamic linked "base" system
To: Jason R Thorpe <thorpej@wasabisystems.com>
From: Johnny Billquist <bqt@update.uu.se>
List: current-users
Date: 08/27/2002 17:34:14
On Tue, 27 Aug 2002, Jason R Thorpe wrote:

> 	* security updates
> 
> With a fully dynamic system, a fix to e.g. the libc resolver only requires
> a libc upgrade to fix everything, not a libc+ping+ping6+... upgrade.

While true, that goes both ways. It also becomes a potentially more
dangerour system. Sneak things into libc, and you have an even better
chance at perverting things.

I don't want to get into a security discussion here, but I don't really
like the dynamic library things being praised as a security improver.

So let's drop that one, please?

	Johnny

Johnny Billquist                  || "I'm on a bus
                                  ||  on a psychedelic trip
email: bqt@update.uu.se           ||  Reading murder books
pdp is alive!                     ||  tryin' to stay hip" - B. Idol