9tr6gyp3 comments on Active AUR malicious packages incident

submitted 4 months ago by nemeski@mander.xyz to c/linux@programming.dev

you are viewing a single comment's thread
view the rest of the comments

[–] 9tr6gyp3@lemmy.world 3 points 4 months ago (1 child)

Yeah, I bet the build process could also be sandboxed, but Im sure its not the default.

parent

[–] defaultusername@lemmy.dbzer0.com 4 points 4 months ago

Sandboxing the build process would be a process. Nix already does it, for example. Many AUR packages don't include a full list of dependencies.

parent