Re: core recovery tools, apt-get, and dpkg should be static

[Chris Waters <xtifr@dsp.net>]

Here's a suggestion:  what if we make statically linked versions of
some of these basic tools *available*, but *don't* make them
standard.  Let people choose for themselves how to manage their
systems, and which risks are worth what costs.

Personally, I am very much opposed to the idea of making statically
linked versions standard.  My motherboard is already at its limit for
RAM -- I can't add any more.  So a proposal to make the system use a
lot more RAM *by default* is not something I can support.

But as an *option*, I think it would be fine.  I agree that it may
have advantages in certain cases (cases that don't apply to me at this
point, but still...).

The only question then becomes, should the statically linked packages
conflict or co-exist with the dynamically linked ones?  I think
co-existence is better, but obviously more work.  But co-existence
probably increases the chance that the statically linked binaries will
survive a hostile break-in.

-- 
Chris Waters   xtifr@dsp.net | I have a truly elegant proof of the
      or    xtifr@debian.org | above, but it is too long to fit into
http://www.dsp.net/xtifr     | this .signature file.