lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20061227132413.GA3405@infradead.org>
Date:	Wed, 27 Dec 2006 13:24:13 +0000
From:	Christoph Hellwig <hch@...radead.org>
To:	"H. Peter Anvin" <hpa@...or.com>
Cc:	Arnd Bergmann <arnd@...db.de>, Karel Zak <kzak@...hat.com>,
	linux-kernel@...r.kernel.org, Henne Vogelsang <hvogel@...e.de>,
	Olaf Hering <olh@...e.de>
Subject: Re: util-linux: orphan

On Tue, Dec 26, 2006 at 07:08:43PM -0800, H. Peter Anvin wrote:
> That's a pretty silly statement.  The real issue is that any library 
> needed by binaries in /bin or /sbin should live in /lib, not /usr/lib.

Well, there's a real treat here - lots of shared libraries mean
mount is rendered unusable when they are not available for some reason.
And there could be lots of reasons for this.  We've seen selinux mislabeling
with a fedoro-ish box in the lab, there is the possibility of unintentional
ABI breaks and so on and so on.

Then again using shared libraries has  big advtantags over duplicating all
the code, so I wouldn't want to say I'm totally against it.  As mount
only needs the various libraries for it's non-core features what about
dlopen()ing those libraries?  That way a messed up system at least has the
bare mount functionality available.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ