linux-kernel - Re: Very slow clang kernel config ..

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 2 May 2021 09:12:37 -0700
From:   Linus Torvalds <torvalds@...ux-foundation.org>
To:     Adrian Bunk <bunk@...nel.org>
Cc:     Tom Stellard <tstellar@...hat.com>,
        Nick Desaulniers <ndesaulniers@...gle.com>,
        Masahiro Yamada <masahiroy@...nel.org>,
        Nathan Chancellor <nathan@...nel.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        clang-built-linux <clang-built-linux@...glegroups.com>,
        Fangrui Song <maskray@...gle.com>,
        Serge Guelton <sguelton@...hat.com>,
        Sylvestre Ledru <sylvestre@...illa.com>
Subject: Re: Very slow clang kernel config ..

On Sun, May 2, 2021 at 2:31 AM Adrian Bunk <bunk@...nel.org> wrote:
>
> The biggest advantage of shared libraries is that they enable
> distributions to provide security fixes.

Adrian - you're ignoring the real argument, to the point that the
above is basically a lie.

The argument was never that things like libc or the core GUI libraries
shouldn't be shared.

The argument was that the "one-off" libraries shouldn't be shared.

Things very much like libLLVM.so.

Or things like "libdivecomputer.so". You probably have never ever
heard of that library, have you? It's used by one single project, that
project isn't even in Fedora, but when we tried to make an rpm for it,
people complained because the Fedora rules said it needed to use
shared libraries.

So the whole notion that "shared libraries are good and required by
default" is pure and utter garbage. It's simply not true.

And no, it really didn't become any more true due to "security fixes".
Your argument is a red herring.

            Linus