4 ms·
Virtually all Linux distributions sandbox their package build system using something like fakeroot. Before the security reason the OP mentions, they don't want
by kbumsik 7y ago
Virtually all Linux distributions sandbox their package build system using something like fakeroot.
Before the security reason the OP mentions, they don't want to screw the build tasks because of the host environment they are running on, or they don't want to screw the host directories when they make mistakes with installation paths.
- cesarb 7y agofakeroot is not a sandbox, it's just a way to have tasks which normally expect to run as root (like setting file permissions during "make install", or creating a .tar.gz with the correct permissions) work without root. IIRC, it works through LD_PRELOAD, and it's very easy to bypass (just unset that environment variable).