Removing static libs

Robert Connolly robert at
Mon Sep 19 21:24:12 PDT 2005

I guess it wasn't documented outside of this mailing list. Removing static 
libraries forces all applications to use shared libraries to take full 
advantage of the PaX kernel. It also makes application upgrades safer, since 
packages can't link to old versions of static libs. A few programs, like 
insmod, link to static libraries by default, which may mean that insmod 
remains vulnerable even after zlib is upgraded. These two reasons are the 
basis of why static libraries are removed.


On September 20, 2005 12:06 am, Tushar Teredesai wrote:
> Hi:
> I was going thru the book and noticed that the static libs are removed
> for all the packages, but the book does not explain why (I was not
> able to find it so if it exists just point me to it:)
> Is there any particular reason for removing the libs other than to
> prevent other packages from using static libs?
> --
> Tushar Teredesai

More information about the hlfs-dev mailing list