[aur-general] Is it OK to provide the binary inside the PKGBUILD?

Jerome Leclanche adys.wh at gmail.com
Wed Dec 4 03:58:39 EST 2013


Definitely not kosher, especially with everything in base64 (pkgbuild
is basically obfuscated).
Providing binaries is a pretty big no-no in general with few exceptions anyway.

J. Leclanche


On Wed, Dec 4, 2013 at 8:54 AM, Karol Blazewicz
<karol.blazewicz at gmail.com> wrote:
> I noticed mp4join doesn't provde an upstream url and the PKGBUILD
> looks ... interesting:
> https://aur.archlinux.org/packages/mp/mp4join/PKGBUILD
>
> package() {
>
> cat << 'ENDEVOMGELAENDE' | openssl base64 -d > mp4join
>
> <code goes here>
>
> ENDEVOMGELAENDE
>   chmod 755 mp4join
>   install -D -m755 ./mp4join "${pkgdir}/usr/bin/mp4join"
> }
>
>
> Is it kosher?


More information about the aur-general mailing list