9tr6gyp3 comments on Active AUR malicious packages incident

[–] 9tr6gyp3@lemmy.world 6 points 4 months ago (4 children)

AUR packages can be sandboxed with many different solutions. Any pckage can be sandboxed really.

parent

[–] defaultusername@lemmy.dbzer0.com 9 points 4 months ago* (3 children)

This attack was executed by a script running in the PKGBUILD itself. You didn't have to run the application to be infected since just building it will infect your machine.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] 9tr6gyp3@lemmy.world 3 points 4 months ago (1 child)

Yeah, I bet the build process could also be sandboxed, but Im sure its not the default.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] defaultusername@lemmy.dbzer0.com 4 points 4 months ago

Sandboxing the build process would be a process. Nix already does it, for example. Many AUR packages don't include a full list of dependencies.

permalink

fedilink

source

parent

[–] patlefort@lemmy.world 2 points 4 months ago

It also had an install script that will be run as root when the package is installed. Can't sandbox that.

permalink

fedilink

source

parent