4 ms·
Sadly, in Debian every package which gets installed, can run a script with root privileges so this is even more dangerous. Although most packages don't need suc
by codedokode 5y ago
Sadly, in Debian every package which gets installed, can run a script with root privileges so this is even more dangerous. Although most packages don't need such privileges.
- goodpoint 5y agoNonsense. Package managers need to be able to run scripts as root to do the installation. And yet, in the last 25 or 30 years there's never been a case of a malicious contributor successfully inserting a backdoor in the installation script of any package in any major distribution. Because there is a vetting process, nothing else. [And yes, of course, it would be possible to sandbox each package installation to access some very specific paths but so far it's really unnecessary]