374
Avoid this very common mistake (lemmy.world)
submitted 2 months ago by to c/linuxmemes@lemmy.world
72 comments fedilink hide all child comments
 

TranscriptImage of a man pointing a gun at his own foot.

Caption: Installing an AUR package without reading it's PKGBUILD.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 months ago* (last edited 2 months ago)

Yeah. There's also some others behaviours to look at.

Like, does the PKGBUILD install the package on some non-standard location? That's a suspicious behaviour, although it's not an automatic red flag by itself.

Does it execute arbitrary code or any external script (worse if it's Python, Lua or JS)? That's a HUGE red flag in most of cases.

Does it (ab)uses of AWK, sed and the like? That's also suspicious in a variety of cases.

  • permalink
  • fedilink
  • source
  • parent