[sudo-users] sudo & apt-get

Luca Ferrari fluca1978 at infinito.it
Fri Sep 4 05:09:46 MDT 2015


On Sun, Jul 12, 2015 at 12:29 AM, Todd C. Miller
<Todd.Miller at courtesan.com> wrote:
> If you can't trust the packages you are installing you are doomed
> no matter what.
>

Correct.
The only thing you can do to evaluate if a package is going to do
nasty things is to install it on a sandbox (e.g., jails). But even
with such an approach, it is a long story to tell a package from good
to bad.

Luca


More information about the sudo-users mailing list