[aur-general] Trusted User Application: Giancarlo Razzolini

Levente Polyak anthraxx at archlinux.org
Thu Oct 20 19:36:10 UTC 2016

Hi Giancarlo,

On 10/20/2016 08:51 PM, Giancarlo Razzolini via aur-general wrote:
>        - I am aware that the .install file does not need to be on the
> sources. But If I am not
>          mistaken, if it is not on the sources array, it also does not
> have it's checksum
>          validated. Since most of those .install files run code, I have
> always put them on the
>          sources array. I am open to suggestions though.

Well I don't see reason to have a checksum for that one, its contained
within the source (PKGBUILD) and not downloaded from a remote.
It either comes through git or via a pkg-src tarball. The PKGBUILD
itself (that contains that checksum) comes through the very same way and
also runs code itself.

>        - I was in doubt regarding the user deletion. In this specific
> instance that dir
>          is the user home dir. I don't think it does create any files
> there though.
>          Do you have any recommendation on how to tackle this one? I
> don't want to leave
>          just an empty dir as leftover of the package uninstall.

I would say: just leave it around. In fact we had a big TODO list [0]
cleaning up all the userdel from all packages in the whole repos (not
the AUR).
It doesn't hurt much and in fact if it ever creates some files (now or
in the future) you definitively don't want to wipe them and definitively
don't want to delete the user-name associated with the
UID of those files.

>   ucspi-tcp:
>        - I took over that package on the migration of the AUR3 to the
> AUR4 and, since
>          there weren't new releases of that software since then, I
> didn't pay much
>          attention to it. Will apply the suggestions.

cool. that's especially important to get some attention onto it when you
consider moving such to the repo ;)

>       I plan to do these corrections as soon as possible (possibly still
> today, tomorrow at max).

That's great to hear *thumbs*

> Thanks for the input

you're welcome! I always try to be as helpful as possible.

[0] https://www.archlinux.org/todo/usergroup-management/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/aur-general/attachments/20161020/acb679b7/attachment-0001.asc>

More information about the aur-general mailing list