In practice, there is nothing you can really do to prevent software running as root from installing whatever it wants. If you are going to install software usin

In practice, there is nothing you can really do to prevent software running as root from installing whatever it wants. If you are going to install software using a company's installer, you'd better trust that company. Linux and BSD package managers can avoid this issue by replacing the original installer completely, but often times a package is just a thin wrapper around the company's own installer, in which case the problem is doubly hidden.