[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bits from the Testing Security team



On Tue, Oct 16, 2007 at 12:20:52AM +0200, Francesco P. Lovergine wrote:
> On Mon, Oct 15, 2007 at 08:40:01PM +0200, Moritz Muehlenhoff wrote:
> > On 2007-10-15, Stefano Zacchiroli <zack@debian.org> wrote:
> > >> So, question, do you want to have reports also of missing pieces of
> > >> statically linked code snippets in that list?
> > 
> > Yes, this list has always included apps linking statically.
> > 
> > Cheers,
> >         Moritz
> > 
> Anyway having a way to distinguish source-embedded by statically-linked
> would be useful. IMHO the second case is almost always an error, but
> for special cases (static linked shell for instance).
> 
Additionally, packages with embedded sources require patching, while
packages which statically link only require rebuilding.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature


Reply to: