Re: a point is being missed

[perry () piermont com (Perry E. Metzger)]

Sam Hartman writes:
>         I really hope, however, that vendors don't start linking login
> statically unless they start shipping source with their OS.  This
> makes it impossible to fix bugs like syslog(3) by patching shared
> libraries.

One reason I discourage clients from building firewalls out of any
system for which there is no source code is the difficulty of fixing
security bugs in emergencies, shared libraries or no...

Perry