Re: static linking with getgrgid follow up

[Geoff Keating]

I think it might help if you knew that when a program that uses NSS
(also, I think, iconv) is linked statically to glibc, it can still use
dynamic libraries, basically everything of the form /lib/libnss*.so.
Making these work is complicated and is guaranteed to work only if the
executable was linked with the very same version of glibc that is
installed, which is why we recommend that people do not link
executables statically if they use NSS functions.

Unfortunately, many people think that static linking will give them a
portability or security benefit, usually based on how some really old
OS behaved.  Actually, static executables are less portable (see
above) and less secure (because security problems can't be
fixed by just installing new shared libraries).

-- 
- Geoffrey Keating <address@hidden>