[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: What is the best way to manage 3rd party debs?



On Tue, 12 Aug 2008 12:52:07 -0400, "Steve C. Lamb" <grey@dmiyu.org> said:

> On Tue, Aug 12, 2008 at 06:46:51PM +0200, Aniruddha wrote:
>> They can overwrite existing (core) system files and possibly cause
>> other harm.

>     No, they can't.  Not without your expressed consent...
[...]

They can't, if they just use the normal Debian archive contents.
However, packages can do all sorts of things via installation scripts.

Then again, the package could hide all sorts of things.  (Think:
trojaned binary.)  If you don't trust your package source, you shouldn't
install their packages.

-- 
Hubert Chathi <uhoreg@debian.org> -- Jabber: hubert@uhoreg.ca
PGP/GnuPG key: 1024D/124B61FA         http://www.uhoreg.ca/
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA


Reply to: