• ganymede
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    3 years ago

    if needed, whats wrong with static linking?

    • brombek
      link
      fedilink
      arrow-up
      3
      ·
      3 years ago

      You can statically link binaries. Plan9 does only that, Rust and Go only support static linking (by default). The problem is that you need a good meta-data system that will allow you to track what was linked into each binary, so that if there is a security issue you know exactly what needs to be rebuilt. I don’t think we have such a system yet. If I have a bug in OpenSSL I just update that, restart servers using TLS and it is patched.

      • ganymede
        link
        fedilink
        arrow-up
        2
        ·
        3 years ago

        The problem is that you need a good meta-data system that will allow you to track what was linked into each binary

        Fantastic idea! This would be a really important project to see developed!