[aur-dev] [PATCH] Use bash script to parse pkgbuilds

Loui louipc.ist at gmail.com
Tue Jun 10 10:45:13 EDT 2008


On Tue, 10 Jun 2008 15:16:29 +0800
"Callan Barrett" <wizzomafizzo at gmail.com> wrote:

> Note to self: restricted mode is apparently not as restricted as it
> sounds, need to look into that and probably how namcap deals with it.
> 
> Possibly a chroot?
> 
> Also I'm assuming everyone is fine and dandy with this behavior so
> when it's not terribly insecure anymore I'll apply this.

Yeah I'm concerned about how secure it is to actually source the
PKGBUILD in bash. I don't know if AUR really needs to cover every
exotic PKGBUILD out there. Having to set up a chroot seems like a bit
much. It would be nice to have all variables resolved though, and bash
could make it a lot simpler.




More information about the aur-dev mailing list