Patch checking robot coming

Dan Kegel dank at kegel.com
Sat Aug 2 19:24:07 CDT 2008


Ambroz wrote:
>  To me, a script that builds just
> every patch is a serious security flaw; I suppose it wouldn't
> be very hard for someone to send a naughty patch
> that would take control of your machine.

True.

> I suggest you make it build patches in a chroot
> as a regular user, and copy over the chroot from a
> template every time a new patch is being built.

Sounds great.  Want to implement that and send it
my way?   It'll take me a while to get the kinks worked
out of the script, it'd be nice to have a hand with the chroot.
- Dan



More information about the wine-devel mailing list