Remix.run Logo
▲ IshKebab a day ago

> Static linking for a project like systemd that is split into many tiny components (> 180 binaries currently) is simply not practical or desirable.

It's pretty easy to do this though isn't it? Just have a single binary and switch on argv[0]. Busybox has been doing that for literally decades.

▲ 21 hours ago | parent | next [-]
[deleted]
▲blucaz 7 hours ago | parent | prev [-]

That model is utter garbage for many reasons, for example every single ROP-style attack now has access to the entire codebase, instead of just what is part of the individual, tiny binary. Another example, it makes it pretty much impossible to restrict access to the discrete binaries via LSMs. And so on, and so forth.