Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 25 Apr 1998 20:28:00 -0700 (PDT)
From:      Alex <garbanzo@hooked.net>
To:        Eivind Eklund <eivind@yes.no>
Cc:        hackers@FreeBSD.ORG
Subject:   Re: Speaking of packaging tools..
Message-ID:  <Pine.BSF.3.96.980425202616.28201I-100000@zippy.dyn.ml.org>
In-Reply-To: <19980426051043.29132@follo.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 26 Apr 1998, Eivind Eklund wrote:

> On Sat, Apr 25, 1998 at 07:58:38PM -0700, Alex wrote:
> > Here's a little something that was posted to the kde-devel mailing list.
> > It only generates ELF binaries which isn't a huge problem, because it
> > doesn't seem to use anything from libc.  Perhaps this could prove useful
> > in revamping pkg_*.  And, yes, it does work nicely (without ELF libs).
> 
> Neat - but do we really want to go in the direction of packages that
> can contain trojans?  Personally I wouldn't like running a
> self-extracting archive, at least...

You can use that argument against any binary packaging system AFAIK, esp. 
those that run scripts before and/or after installing the package.  Think
about if someone made a rogue colorls package, installed by root...  Also,
when was the last time you heard about someone getting an infected copy of
the WinZip sea (Considering the ## of Windows shareware mirrors and the
linke..)? 

- alex

"Contrary to popular belief, penguins are not the salvation of modern
technology.  Neither do they throw parties for the urban proletariat."


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980425202616.28201I-100000>