[Secure-testing-team] Embedded dietlibc in ccontrol

Moritz Muehlenhoff jmm at inutil.org
Mon Oct 15 17:54:27 UTC 2007


Florian Weimer wrote:
> * Nico Golde:
> 
> > Hi Ted,
> > * Ted Percival <ted at midg3t.net> [2007-10-15 09:03]:
> >> ccontrol staticly links in dietlibc. I guess it should be added to the 
> >> list of packages with embedded code, unless static linking is handled 
> >> separately.
> >
> > BTW did you consider to use the shared library?
> 
> Or linking against libc6, like everybody else on the planet? 8-)

Indeed, linking against dietlibc should only be done for special cases
like bootloader environments or such, glibc provides several security
features missing in dietlibc or uclibc.

Cheers,
        Moritz




More information about the Secure-testing-team mailing list