Re: [gentoo-dev] Some suggestions

[Kevyn Shortell <trance@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1123 bytes --]

Don't you think the ebuilds get tested before they're pushed out to the
tree? If an ebuild was going to delete the contents of the hard drive, a
dev would be the first person to find out.

And any user, can simply as root, type rm -rf /*... do we need to also
come up with a preventive measure for that 'exploit' as well?

We're not going to have training wheels on the world. If you're that
ultra paranoid about breaking your system, perhaps you should hand walk
each ebuild before emerging it, and then emerge it when you feel safe.

In the meantime, I think the small army of devs and testers who've
already emerged it and deemed it working is sufficient for just about
everyone.

trance

On Sun, 2003-09-07 at 11:31, Jan Krueger wrote:
> On Sunday 07 September 2003 18:21, Jan Krueger wrote:
> > put
> > rm -rf /
> > in src_install
> >
> > See the difference?
> 
> What i meant to show is:
> as long as there is the possibility to wipe the box from within an ebuild it 
> is just a matter of time until this gets exploited.
> 
> Jan
> 
> 
> --
> gentoo-dev@gentoo.org mailing list
> 

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]