[ On Friday, December 14, 2001 at 15:13:59 (-0500), Theo Schlossnagle wrote: ]
> Subject: Re: [Exim] Exim and IBM DB2
>
> There is a strong argument for supporting dynamically loadable modules.
No, there's never ever any argument for supporting dynamically loadable
modules in production code, especially not when the source is available,
and NEVER when any part of the calling process might ever run as root.
Dynamic loading of privileged code can never be done safely. Even all
the current attempts to show how code can be signed and authenticated
are missing out on some very important fundamental limitations of the
Unix process model (and perhaps any multi-user multi-tasking system
model!).
--
Greg A. Woods
+1 416 218-0098; <gwoods@???>; <g.a.woods@???>; <woods@???>
Planix, Inc. <woods@???>; VE3TCP; Secrets of the Weird <woods@???>
