[aur-general] Maintenance issues with metasploit-git package
Johannes Löthberg
johannes at kyriasis.com
Thu Aug 21 13:27:30 EDT 2014
On 21/08, Massimiliano Torromeo wrote:
>On Thu, Aug 21, 2014 at 6:00 PM, <483ken at gmail.com> wrote:
>>
>> 1. The build script appends instructions into user-specific and
>> shell-specific ~/.bash_profile on build time.
>>
>
>That package is really really bad but this point makes it borderline
>malicious. A package that wants to touch my home directory should be
>immediately removed IMO.
Not only that, he was told about several problems with the package in
the comments but refused to accept that they were problems and told the
person who commented on them to "NOT WASTE [HIS] TIME AGAIN".. To be
honest it doesn't sound like he's fit to maintain AUR packages.
--
Sincerely,
Johannes Löthberg
PGP Key ID: 3A9D0BB5
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 1530 bytes
Desc: not available
URL: <http://mailman.archlinux.org/pipermail/aur-general/attachments/20140821/2cd89a7b/attachment-0001.asc>
More information about the aur-general
mailing list