[pacman-dev] Security vuln. in makepkg?

Daniel Micay danielmicay at gmail.com
Fri Sep 4 23:33:27 UTC 2015


Either way, the package can do whatever it wants as root when it's
installed. Building in a container is to provide protection from stupid
mistakes, not an attacker.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/pacman-dev/attachments/20150904/a55e6f09/attachment.asc>


More information about the pacman-dev mailing list