> 	i'm not sure how this should be addressed.
> 	- is it okay to forbid statically linked binaries from using dlopen()?

For short term, this is ok.
But I hope that statically linked binaries can use dynamically loaded
functions for long term. For example, /bin/sh should be able to handle
multibyte locales.

Also, it is better that statically linked (/sbin) binaries can use
dynamically linked functions related to nameservice or PAM.
--
soda