Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 5 Jun 2003 17:11:14 -0500
From:      "Matthew D. Fuller" <fullermd@over-yonder.net>
To:        Terry Lambert <tlambert2@mindspring.com>
Cc:        arch@freebsd.org
Subject:   Re: Making a dynamically-linked root
Message-ID:  <20030605221114.GB51432@over-yonder.net>
In-Reply-To: <3EDF2B1C.6E9C892E@mindspring.com>
References:  <20030603113927.I71313@cvs.imp.ch> <16092.35144.948752.554975@grasshopper.cs.duke.edu> <20030603115432.EGLB13328.out002.verizon.net@kokeb.ambesa.net> <20030603122226.BGPM11703.pop018.verizon.net@kokeb.ambesa.net> <3EDD81A4.B6F83135@mindspring.com> <3EDDF732.1060606@tcoip.com.br> <3EDF2B1C.6E9C892E@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 05, 2003 at 04:35:56AM -0700 I heard the voice of
Terry Lambert, and lo! it spake thus:
> 
> And if init or mount gets hosed?

Oh, come on.  You're smarter than that.

If a static /sbin/init gets hosed, you're screwed.
If a dynamic /sbin/init gets hosed, you're screwed.

If /lib/libc gets hosed, your dynamic /sbin/init is screwed.  Your static
/sbin/init still moves along just fine.


It's not that static binaries eliminate SPoF's.  They just reduce the
scope of some failures.  Whether that reduction is sizeable or lost in
the noise is left as an exercise to the reader (presuming the reader
understands the concept of "different strokes").


> You're not so much missing anything as you are ignoring the
> examples which are inconvenient to arguing your position.

A reasonable statement, but equally true in reverse.

Dynamic _everything_ multiplies the number of single failures that can
completely screw you by making many more failures able to indirectly b0rk
basic things like "getting a shell".


For extra points, find the false statement:
- Static-linked systems are immune from corruption failures.
- Dynamically-linked systems no more failure modes than static.


-- 
Matthew Fuller     (MF4839)   |  fullermd@over-yonder.net
Systems/Network Administrator |  http://www.over-yonder.net/~fullermd/

"The only reason I'm burning my candle at both ends, is because I
      haven't figured out how to light the middle yet"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030605221114.GB51432>