> Having to rebuild every kernel you install to get a security patch, on every system you install it on, would be an enormous amount of time spent Rebuild? No.

> Having to rebuild every kernel you install to get a security patch, on every system you install it on, would be an enormous amount of time spent Rebuild? No. Just relink (and link in a just-generated binary containing the randomness seed). At boot time. Just what OpenBSD is experimenting with.