A backdoor in xz
A backdoor in xz
Posted Mar 30, 2024 7:32 UTC (Sat) by mb (subscriber, #50428)In reply to: A backdoor in xz by epa
Parent article: A backdoor in xz
>because it links as a C library and you get the transitive dependencies of everything
So, statically link with LTO?
Posted Mar 31, 2024 14:23 UTC (Sun)
by dskoll (subscriber, #1630)
[Link]
No, static linking isn't needed. Just split the large libsystemd into smaller libraries where each smaller library contains a set of closely-related APIs and minimal other dependencies. There's no reason to pull code in to do log compression if all you need is code for the sd_notify protocol.
A backdoor in xz