Re: What is the best way to manage 3rd party debs?
On Wed, Aug 13, 2008 at 09:12:01AM +0200, Aniruddha wrote:
> On Tue, 2008-08-12 at 20:25 -0400, Joey Hess wrote:
> > martin f krafft wrote:
> > If these examples didn't make sense to someone, don't install third party
> > packages from untrusted sources, no matter how much checking you do..
> >
> I'm not worried about purposeful malicious intent (otherwise I would
> just use a chroot). I want to prevent an accidentally badly build deb
> from wrecking my system.
So far, badly created {post|pre}{inst|rm} has been the source of trouble
in this respect for me with Debian unstable itself from this respect.
Non-Debian package's quality check in this respect can be done
relatively simply by using mc to look into binary package. But you
never know what does the binary files do when executed unless you check
the source.
If you feel its needs to be inspected, I think it is time to rebuild it
by yourself and run lintian etc. to test its compliance to Debian policy.
Regards,
Osamu
PS: Please remember that installing package created by someone is giving
packager a full root authority of your machine.
Reply to: