4 ms·
>http://brew.sh/ http://brew.sh/ the home site shows a simple wget example for homebrew formulae the chain of trust is solid up until make and configure happen
by jjn2009 10y ago
>http://brew.sh/ http://brew.sh/
the home site shows a simple wget example for homebrew formulae
the chain of trust is solid up until make and configure happen, at that point any number of things could happen so it's a question of whether or not you trust whatever scripts its running.
unless homebrew has some sort of enforcement on what that script can do it could do anything. This is why its a really good thing that homebrew does not require root.
- mikemcquaid 10y ago> unless homebrew has some sort of enforcement on what that script can do Anything from our Homebrew/core (i.e. wget) uses the macOS sandbox to prevent writes outside of permitted locations.