Subject: Re: static linking for NetBSD
To: None <tech-security@netbsd.org, tech-userlevel@netbsd.org>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-userlevel
Date: 09/15/2003 23:11:47
-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Brett" == Brett Lymn <blymn@baesystems.com.au> writes:
Brett> Errrr Linux is not a good thing to benchmark against - the horrors
Yes, maybe a good point.
>> I find it much easier to do:
>> % /sbin/md5sum /sbin/login
>>
Brett> And you actually trust your md5sum is not trojaned? How
Brett> interesting.
I give this example metaphorically :-)
Brett> Having managed Sun systems for many years, yes, Sun do get it pretty
Brett> much right. I can apply patches for shared libraries to my system
Sounds great. I stopped using Sun's in day to day use sometime around
Solaris 2.3, when the Sparc port starting being useable :-)
Brett> grovelling ones which may break). I have had troubles getting a RH8
Brett> binary running in RH9 due to, what seems to be, arbitrary interface
Brett> changes in glibc - trying to point at linux as an example of why
Brett> shared libraries is bad is dodgy, their philosophy is wrong which
Brett> flows down to their implementation which causes pain and lossage.
Brett> NetBSD, at least, works to avoid doing that.
But, we still share code with them: X, KDE, GNOME. At least they were
optional. That's why I don't want PAM in my /bin/login. I don't want to
share that incompetence!
The fact that I don't need it for anything I do, while BSD auth provides
some things that I've found useful also sways me.
] Out and about in Ottawa. hmmm... beer. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian/notebook using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys - custom hacks make this fully PGP2 compat
iQCVAwUBP2Z/coqHRg3pndX9AQGnngP7BmUWQI7kNQ9LyFfOgL60zSMM/FY78vTd
ClXWFTivN128TWB6UiV6e0fivghSUGrsXKbuxdoW3hyDpN5SpCXuRGHiGYebLDe+
wWoYgKShl69bz+cKDXd4VfbXVZvTi0MW32dYrQ8Bb1wGH8mXXtpq03PDfM5BhcRv
5UwuU6ik4ig=
=aAS7
-----END PGP SIGNATURE-----